Terms of Service

1. What NPMScan does

• NPMScan analyzes npm packages for security risks.
• Reports are generated automatically based on code or package metadata you provide.
• We don’t guarantee every vulnerability or issue will be detected — use our reports as guidance, not absolute truth.

2. You are responsible for your own code

• You own everything you upload or paste into the site.
• You are responsible for how you use our reports in your project.
• We are not liable for any damage, loss, or issues caused by your code or by depending on our analysis.

3. No storage of your data

• We do not store package code, package.json files, or scan results.
• Everything is processed temporarily and discarded after generating your report.
• For enterprise users, temporary storage may happen only if you explicitly share files or project data. This is deleted when:
  • you cancel the service,
  • you request deletion,
  • or our system automatically clears it.

4. Enterprise users

• You may provide additional project information so we can assist with security analysis.
• You confirm that you have permission to share that data with us.
• We handle all shared data privately and delete it as soon as it’s no longer needed.

5. No warranties

• NPMScan is provided “as is.”
• We don’t promise perfect accuracy, uptime, or compatibility.
• You use the service at your own risk.

6. Acceptable use

You agree NOT to:

• misuse the scanner, attack our servers, or spam requests,
• use the service for illegal activities,
• reverse engineer, scrape, or clone our platform.

7. Limitation of liability

• We’re not responsible for losses, bugs, outages, incorrect reports, or security incidents in your project.
• We provide insights, not guarantees.

8. Changes to the service

• NPMScan may update features, pricing, or rules at any time.
• If we make significant changes that affect enterprise users, we’ll notify them.

9. Contact

Questions or concerns? Contact us: shyngys@blockhacks.io