Current scope

npm is the live analysis surface. Reports combine stored release evidence, version comparison, advisory context, and an explicitly disclosed automated narrative. Other ecosystems shown on the homepage are planned coverage, not currently active analysis claims.

Open implementation

The service source, analysis pipeline, storage model, and public issue history are available in the pwnedpackages-service repository. The public implementation is the authoritative reference for how this version of the service operates.

Maintainer

Project ownership and maintenance are attributed to Alvaro Lorente. Report conclusions remain automated unless a report explicitly states that a human review occurred.