Fix Lockfile Integrity is a tool that reverts all sha1 integrity back to sha512 in lock files, supporting both package-lock.json and npm-shrinkwrap.json, working with lockfile versions 1 & 2, and can be configured to work on multiple paths for monorepo support. It only fixes packages from the npm registry by default, but this can be changed via a configuration file. The tool can be installed globally with 'npm install -g fix-lockfile-integrity' or run with npx, and usage involves checking a local folder for a lockfile and fixing any sha1 in it.
Common questions about Fix Lockfile Integrity including features, pricing, alternatives, and user reviews.
Fix Lockfile Integrity is Reverts sha1 integrity back to sha512 in lock files for enhanced security. It is a Application Security solution designed to help security teams with NPM.
Fix Lockfile Integrity is a free Application Security tool. This makes it accessible for organizations of all sizes, from startups to enterprises. Visit https://github.com/yoavain/fix-lockfile-integrity/ for download and installation instructions.
Popular alternatives to Fix Lockfile Integrity include:
Compare all Fix Lockfile Integrity alternatives at https://cybersectools.com/alternatives/fix-lockfile-integrity
Fix Lockfile Integrity is for security teams and organizations that need NPM. It's particularly suitable for small to medium-sized teams looking for cost-effective solutions. Other Application Security tools can be found at https://cybersectools.com/categories/application-security
Head-to-head feature, pricing, and rating breakdowns.
Software supply chain security platform detecting malware in dependencies
Malware-resistant software libraries rebuilt from source for multiple languages
GuardDog is a CLI tool that identifies malicious PyPI and npm packages using heuristics-based analysis of source code and metadata.