What is the best way to audit our entire npm dependency tree for exposed secrets and malicious packages before our security compliance audit tomorrow?
Download run
Fan-out diagram
The searches the AI actually ran for this prompt.
SEED QUERY
What is the best way to audit our entire npm dependency tree for exposed secrets and malicious packages before our security compliance audit tomorrow?
4 real searches · 1 real-search pass
official npm audit documentation package lockfile audit behavior 2026Google ↗
OBSERVED
OSV Scanner official documentation scan npm lockfilesGoogle ↗
OBSERVED
Gitleaks official documentation detect secrets git repositoriesGoogle ↗
OBSERVED
Socket npm supply chain security malicious packages official documentationGoogle ↗
OBSERVED
Badge and edge weight = share of passes that produced the query. Hover a query for its intent and routing format.
Query classes
Google's semantic query class for every sub-query: what kind of answer each search is after, simulated vs real.
Classifying 4 queries…
Searches and sources
ChatGPT4 real searches · gpt-6
official npm audit documentation package lockfile audit behavior 2026 Google ↗
OSV Scanner official documentation scan npm lockfiles Google ↗
Gitleaks official documentation detect secrets git repositories Google ↗
Socket npm supply chain security malicious packages official documentation Google ↗
- Socket security platform · socket.dev
- Risk detection documentation · docs.socket.dev
- OSV-Scanner documentation · google.github.io
- Security Best Practices · nodejs.org
- Socket FAQ · docs.socket.dev
- Gitleaks · github.com
- npm-audit · docs.npmjs.com
- npm-audit · docs.npmjs.com
Queries
4 queries · click a column to sort
| Query / type | Search | Intent | Query class | Routing format | Cluster | Freq ↓ | Weight |
|---|---|---|---|---|---|---|---|
official npm audit documentation package lockfile audit behavior 2026 OBSERVED | Google ↗ AI Mode ↗ | — | — | — | — | 1x of 1 | |
OSV Scanner official documentation scan npm lockfiles OBSERVED | Google ↗ AI Mode ↗ | — | — | — | — | 1x of 1 | |
Gitleaks official documentation detect secrets git repositories OBSERVED | Google ↗ AI Mode ↗ | — | — | — | — | 1x of 1 | |
Socket npm supply chain security malicious packages official documentation OBSERVED | Google ↗ AI Mode ↗ | — | — | — | — | 1x of 1 |