Mode B · Offline upload

Upload a lockfile

Scan offline from package-lock.json. Optional files improve pipeline coverage.

Scan Upload

When to use this mode

Use when your repo isn't on GitHub, contains private context, or you want to scan a specific lockfile offline. package-lock.json is required. Without the workflows zip, the pipeline lens vetoes auto-merge on every finding.

+
Click to choose or drag & drop
package-lock.json · Max 10 MB
→

Your project's npm v7+ lockfile (lockfileVersion 2 or 3).

+
Click to choose or drag & drop
.zip of .github/workflows/ · Max 1 MiB
→

Zip your .github/workflows/ directory. Without this the pipeline lens vetoes auto-merge on every finding.

+
Click to choose or drag & drop
package.json · Max 1 MiB
→

Used by the pipeline lens for test-script detection.

Analyzing your dependencies...
Files never stored after scan
JSON-only parsing, no code execution