Open tested upgrade pull requests
Connect
SPIRITT
npmnpm registry data,
turned into safer code
SPIRITT checks your dependencies against npm advisories and ships the fixes, tracks downloads and version adoption for your packages, and watches the registry for changes that matter.
What you can do with npm.
Vulnerabilities fixed, not listed
Bulk advisory checks across every repository, followed by upgrades shipped and tested.
Know who uses what you ship
Downloads over time and by version show adoption and when an old release can be retired.
Better choices before install
Search and package metadata reveal maintenance, licenses and momentum before you commit.
Works with your other apps.
Get started in three steps.
01
Open your workspace
Start a workspace where SPIRITT works on your repositories and package data.
02
Connect npm
Connect npm so SPIRITT can read registry metadata, downloads and advisories and revoke tokens.
03
Hand over the outcome
Ask for a dependency audit, an adoption report or a registry watch. SPIRITT runs it and ships the follow-up.
Hand over a mission.
Choose a mission. Make it yours.
Put npm to work.
Put npm data to work
Questions
npm, with SPIRITT.
01What can SPIRITT do with npm?+
SPIRITT queries security advisories in bulk, reads package metadata, searches the registry, follows the registry changes feed, reads download statistics by package, version and period, and can delete a user token.
02Can it fix vulnerable dependencies?+
Yes. SPIRITT checks your dependencies against advisories, upgrades affected packages, runs your tests and opens pull requests with the changes.
03Can it track how our packages are used?+
Yes. It records downloads over time and by version, so you can see adoption, upgrade speed and when old versions can be retired.
04Can it help choose dependencies?+
Yes. SPIRITT compares candidates on downloads, release cadence, maintainers and license and recommends one with the evidence.
05Which apps pair well with npm?+
GitHub and GitLab for upgrade pull requests, Linear for security follow-up, BigQuery for download history, Supabase for dashboards and Slack for alerts.
06How do I start with npm?+
Open a workspace, connect npm and ask for a dependency audit. SPIRITT finds the issues and ships the fixes.