package-triage

Triage a suspicious or newly encountered software package end-to-end using Spectra Assure Community reports, OSV vulnerability data, OpenSSF Scorecard, and static inspection. Use when the user asks to "triage a package", "investigate this library", "is this npm/pypi/gem safe", or supplies a purl or package name.