check-npm-maintainers

Check transitive npm maintainers of all dependencies in a project.

Reports packages where:

• A key owner is missing from the maintainers
• Maintainers include people not in the trusted owners list
• All maintainers are external (no trusted or key owners)

Install

npm i -g check-npm-maintainers@latest

Usage

Create a trusted owners file (one username per line):

npm-username-1
npm-username-2

Then run from a project directory with a package.json:

check-npm-maintainers owners.txt

Options

--prod                  Only check production dependencies
--key-owner <username>  Key owners to verify (can be repeated)

Examples

Check only production dependencies:

check-npm-maintainers --prod owners.txt

Check with multiple key owners:

check-npm-maintainers --key-owner npm-username-1 --key-owner npm-username-2 owners.txt