npm Trusted Publish Lint - OIDC & tokens — Licence

Free scope
  Scans the open workflow, .npmrc or package.json and names every npm publish credential, OIDC and provenance gap with line numbers - the whole check, no key is free for any use, personal or commercial, for as long as you keep the
  extension installed, and the online check at the product page is free without registration.

Paid scope
  Exports the finished audit as a dated Markdown/CSV file you keep and hand to a reviewer, for every workflow in the repo in one pass is the paid part. It asks for a licence key issued at purchase (one seat, one key). The key is checked against the payment provider and
  cached locally for 30 days so it keeps working offline.

Redistribution
  You may not resell, re-host or bundle this extension or its rule set. The rule set and the
  engine are provided as-is; check results are advisory and do not constitute legal advice.

(c) ReadyStack — https://getreadystack.com
