NPM Package Risk Scoring & Semantic Memory Store

npm-sentinel analyses NPM packages for vulnerabilities, license risks, and quality signals; Chroma stores and indexes those risk profiles as vector embeddings so the can answer 'which of our 300 dependencies have similar risk patterns to this newly flagged CVE?' across the entire dependency graph. The combined workflow turns one-off package checks into a persistent, queryable organisational risk knowledge base.