npm-remediation vs security-review
npm-remediation and security-review are both security skills. security-review scores higher (89 vs 18 out of 100). security-review has more GitHub stars (41k), and security-review was updated more recently (today). The table compares them side by side.
| npm-remediation | security-review | |
|---|---|---|
| Score | 18 / 100 | 89 / 100 |
| What it does | Remediate vulnerable npm/Node.js dependencies by bumping direct versions in package.json or pinning transitive packages via an overrides block, preserving formatting and existing lockfile discipline. | Review a change, module, or surface for exploitable defects — trust boundaries, authn/authz, injection, secret exposure, filesystem and network reach, dependency risk. Use when the user asks for a security review, audit, or vulnerability check of concrete code. Not for general code review, lint, or compliance paperwork. |
| Publisher | Community: multistageharness | Community: codewhale-hq |
| Grades | Maintenance C, Licence F, Quality C | Maintenance A, Licence A, Quality A |
| npm downloads a week | Not on npm | Not on npm |
| Runs | Skill | Skill |
| Works with | Claude Code, Claude apps | Claude Code, Claude apps |
| GitHub stars | 0 | 41,112 |
| Last commit | 14 Jul 2026 | 23 Oct 2026 |
| Licence | None found | MIT |
| Listed since | 19 Oct 2026 | 23 Oct 2026 |
| Install npm-remediation | Install security-review |
Questions
Is npm-remediation or security-review more popular?
security-review has more GitHub stars: 41,112.
Can I use npm-remediation and security-review together?
Yes. AI assistants can load several skills at once. Install both and the assistant picks the right one for each task.