npm release analysis workspace

npm package security analyses

Compare a package's latest public release with its stored baseline. Review file changes, lifecycle scripts, suspicious paths, and OSV advisory context before accepting the update.