What free CLI tools can I integrate into our CI pipeline to catch npm package vulnerabilities before they hit production
Download run
Fan-out diagram
The searches the AI actually ran for this prompt.
SEED QUERY
What free CLI tools can I integrate into our CI pipeline to catch npm package vulnerabilities before they hit production
4 real searches · 1 real-search pass
2026 free open source CLI npm dependency vulnerability scanners OSV-Scanner Trivy npm audit Socket CLI GitHubGoogle ↗
OBSERVEDOther / navigational
OSV-Scanner official documentation npm lockfile CI vulnerability scannerGoogle ↗
OBSERVEDOther / navigational
Trivy filesystem npm package lockfile vulnerability scanning official docsGoogle ↗
OBSERVEDConsequence
npm audit official documentation CI audit levelGoogle ↗
OBSERVEDOther / navigational
Badge and edge weight = share of passes that produced the query. Hover a query for its intent and routing format.
Query classes
Google's semantic query class for every sub-query: what kind of answer each search is after, simulated vs real.
ChatGPT real searches (4)
Classes come from the query-classifier (a local Laya model). 4 of 4 calls are low-confidence (under 50%) — hover a query in the table to see its confidence.
Searches and sources
ChatGPT4 real searches · gpt-6
2026 free open source CLI npm dependency vulnerability scanners OSV-Scanner Trivy npm audit Socket CLI GitHub Google ↗
OSV-Scanner official documentation npm lockfile CI vulnerability scanner Google ↗
Trivy filesystem npm package lockfile vulnerability scanning official docs Google ↗
npm audit official documentation CI audit level Google ↗
- Trivy GitHub · github.com
- npm-audit · docs.npmjs.com
- GitHub - google/osv-scanner: Vulnerability scanner written in Go which uses the data provided by https://osv.dev · github.com
- OWASP dep-scan · owasp.org
- Free, local-first JS/TS vulnerability scanner · owasp.github.io
Queries
4 queries · click a column to sort
| Query / type | Search | Intent | Query class | Routing format | Cluster | Freq ↓ | Weight |
|---|---|---|---|---|---|---|---|
2026 free open source CLI npm dependency vulnerability scanners OSV-Scanner Trivy npm audit Socket CLI GitHub OBSERVED | Google ↗ AI Mode ↗ | — | Other / navigational | — | — | 1x of 1 | |
OSV-Scanner official documentation npm lockfile CI vulnerability scanner OBSERVED | Google ↗ AI Mode ↗ | — | Other / navigational | — | — | 1x of 1 | |
Trivy filesystem npm package lockfile vulnerability scanning official docs OBSERVED | Google ↗ AI Mode ↗ | — | Consequence | — | — | 1x of 1 | |
npm audit official documentation CI audit level OBSERVED | Google ↗ AI Mode ↗ | — | Other / navigational | — | — | 1x of 1 |