Compare

Should I use A or B?

Paste two already-scanned packages to see a side-by-side security diff. Format: source/package or source/package@version — e.g. npm/@foo/bar, github/owner/repo, or npm/mcp-xmorf@1.0.2 to pin a version. Use two @version operands of the same package to diff two releases. Comparison reads from the cached scan; neither side is re-scanned. If a package isn’t cached yet, scan it first from the scan page.