Npm Package Vulnerability Runbook

---
name: "NPM Package Vulnerability Runbook"
slug: "npm-package-vulnerability-runbook"
description: "Automates vulnerability triage for Node.js projects using the npm Audit API and OSV.dev API. Generates step-by-step remediation runbooks with patching commands and dependency tree analysis."
verification: "security_reviewed"
source: "https://docs.npmjs.com/cli/v10/commands/npm-audit/"
author: "npm, Inc."
category: "Library & API Reference"
framework: "MCP"
---

# NPM Package Vulnerability Runbook

Automates vulnerability triage for Node.js projects using the npm Audit API and OSV.dev API. Generates step-by-step remediation runbooks with patching commands and dependency tree analysis.

## Installation

Use the upstream install or setup path that matches your environment:
- npm-audit | npm Docs Skip to search Skip to content
- npm Docs
- npm package scope, access level, and visibility
- Docker and private modules

Requirements and caveats from upstream:
- Downloading and installing Node.js and npm
- Try the latest stable version of node
- Creating Node.js modules

Basic usage or getting-started notes:
- Creating a strong password
- Receiving a one-time password over email
- About two-factor authentication

- Source: https://docs.npmjs.com/cli/v10/commands/npm-audit/

## Documentation

- https://docs.npmjs.com/cli/v10/commands/npm-audit/

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/npm-package-vulnerability-runbook/)