sentinel-check

Thin npm wrapper for the sentinel CLI published from the sentinel-npm repository.

Run Sentinel with npx, no manual binary setup required.

Use npx --yes sentinel-check ... for one-shot runs.

Quick start

Run directly with npx

# audit only
npx --yes sentinel-check check

# validate lockfile then install dependencies
npx --yes sentinel-check ci

# install one package with verification
npx --yes sentinel-check install lodash@4.17.21

Add to package.json scripts (recommended)

Install once in the project and call sentinel directly from npm scripts:

npm install -D sentinel-check

{
  "scripts": {
    "sentinel:check": "sentinel check",
    "sentinel:ci": "sentinel ci"
  }
}

npm run sentinel:check
npm run sentinel:ci

Need package install with verification? Run it directly:

npx --yes sentinel-check install express@4.21.2

CI usage

GitHub Actions:

- name: Verify dependency integrity
  run: npx --yes sentinel-check ci

Notes

1. The wrapper downloads the matching Sentinel release binary on first use.
2. Downloaded binaries are cached locally.
3. Integrity is verified using release checksums before execution.
4. If you see dependency cycles detected, Sentinel found circular dependency chains in the lockfile graph. Verification continues and cycles are reported as a warning. You'll still see the integrity status of all packages. To resolve cycles, regenerate your lockfile with npm install or update dependencies.

Useful environment variables

See the main README for full CLI usage and binary installation options.