📄️ NodeSource Certified Modules v3
Overview
📄️ NodeSource Risk Score
NodeSource Certified Modules 3 (NCM 3) calculates a risk score for every third party package on npm. Each module is assessed for security vulnerabilities, license compliance concerns and a series of package risk and quality attributes.
📄️ Compliance
The Compliance group is for special criteria which have elevated legal and/or security implications.
📄️ Risk
The Risk group is for criteria which are intended to indicate whether a package's usage or installation may be abnormally risky, outside of purely security.
📄️ Quality
The Quality group is for criteria which are intended to indicate whether a package conforms to good open-source practices.
📄️ Getting started
You can use NodeSource Certified Modules 3.0 (NCM 3) from the N|Solid Console or from the command line with ncm-cli. This page explains both options and how to install and authenticate ncm-cli.
📄️ Reports
ncm report
📄️ Whitelisting packages
ncm whitelist
📄️ Switching orgs & config
ncm orgs \
