NPQ

Summary from the TLDR InfoSec newsletter

NPQ is a security tool that audits npm/yarn packages before installation, running safety checks like vulnerability scans, package age verification, download count analysis, and malicious script detection. It prompts users for confirmation if issues arise, then allows npm or yarn to proceed with installation.