Tobbe on Mythryl: “> The daily per-package probability was pulled entirely out of my…”

🧾 Introducing npm.tax Estimate the probability of being impacted by a breach in your npm supply chain. Adjust the knobs to see how slimming your node_modules lowers your risk. Look up a package to see its own risk profile, then share the report, e.g. npm.tax?direct=59&tr.... What's your npm tax?

npm.taxnpm.tax: npm supply-chain risk explorerExplore how your code, npm dependency count, breach probability, and time horizon combine into cumulative supply-chain risk.

Post