/**
 * npm package scanner
 *
 * Downloads and analyzes npm packages without installing them.
 * Checks for suspicious scripts, obfuscated code, and known malicious patterns.
 */
import type { Finding, ScanReport, ScanOptions } from "./types.js";
/**
 * Scan an npm package by name.
 */
export declare function scanNpmPackage(packageName: string, options: Omit<ScanOptions, "target"> & {
    target?: string;
}): Promise<ScanReport>;
/**
 * Scan the extracted tarball contents for malicious patterns.
 * Exported for tests (the download path needs network; this walker does not).
 */
export declare function scanExtractedNpmFiles(extractDir: string, findings: Finding[]): void;
//# sourceMappingURL=npm-scanner.d.ts.map