GitHub repository: sjinks/i-can-haz-ur-secrets
Primary language: Shell
Description: Node.js package to catch insecure invocations of 'npm ci', when a malicious script has a chance to steal your secret environment variables