Home

ChatNPM is ChatArch's read-only helper for npm registry metadata and npm publishing evidence.

• Production docs: https://arch.gh.wzhecnu.cn/ChatNPM/
• GitHub: https://github.com/ChatArch/ChatNPM
• PyPI: https://pypi.org/project/ChatNPM/

Quick start

pip install chatnpm
chatnpm --tree
chatnpm --tree-brief
chatnpm package inspect npm --format json
chatnpm trusted audit . --format json
printf '%s\n' 'Open https://www.npmjs.com/login/abc to use your security key' | chatnpm auth parse-output --format json

Capabilities

chatnpm package inspect <package> reads only public npm registry metadata and reports package, version, scope, maintainers, repository, a safe publishConfig summary, dist integrity/signature/attestation, and provenance evidence. chatnpm trusted audit reads only local package.json and .github/workflows/*.yml files to report id-token: write, npm publish --provenance, npm registry setup, and token-fallback evidence; local publishConfig is also summarized safely instead of echoing unknown or auth-like fields.

chatnpm auth parse-output parses npm CLI output for login URLs and OTP requirements, emitting structured JSON for Hermes/Feishu-style authentication cards and user-completion handoff.

CLI tree

chatnpm --tree
chatnpm --tree-brief

See CLI Tree.

Chinese version: https://arch.gh.wzhecnu.cn/ChatNPM/.