NPM Registry Monitor

Track per-package npm releases via the public registry API. Maps to "JS dependency intel / npm release watch / supply-chain security" briefs. Parallel to the PyPI demo (#33) for the JS ecosystem.

Built 2026-05-03 as Demo #27.

Run

. ~/freelance/.venv/bin/activate
cd ~/freelance/portfolio_demos/npm_registry_monitor
python monitor.py --reset
python monitor.py --once

Result

• 5 packages × 20 latest versions = 100 records tracked ✅

(react, next, typescript, @anthropic-ai/sdk, openai)

• Idempotent re-run, 4 simulated tarball_size deltas detected ✅
• Diff alerts on: new versions, deprecated flag flips (security signal),

latest-tag changes, dependency-count drift, tarball-size changes ✅