Get the weekly radar
One short email with the freshest products, every week.
Scans an npm project's dependency tree for quantum-vulnerable cryptography via npx.
Grounded in available product and source data
quantum-audit is a command-line tool for auditing npm projects. Rather than scanning for security vulnerabilities in general, it specifically checks a project's dependency tree for cryptography that is considered vulnerable to quantum computing attacks.
It is described as part of the Chain Audit ecosystem, a related set of auditing tools referenced in its description. Details about what else this ecosystem includes are not provided.
The tool runs with the command `npx quantum-audit`, executed from within a project directory. The source does not specify which cryptographic algorithms or libraries the scan checks for, what the output looks like, or whether results can be exported for use in a CI pipeline.
