Terms

Last updated 19 October 2026. These terms cover npryx Pro, the hosted scan service at scan.npryx.dev, run by Undefined Labs Pty Ltd (“we”), in Australia. The npryx CLI and the self-hostable scan service are open source and covered by their ISC license, not by these terms.

The service

npryx Pro runs the npryx scanner for you. When remote scanning is on, npryx sends us the name, version and integrity of public npm packages, and we return a signed result. A result is an automated check for some known risks. It is not a guarantee that a package is safe, and you remain responsible for what you run.

Your subscription

Your key

Your API key is for you or your team. Keep it secret, and get a new one if it leaks. Don't share it publicly, resell access, or try to get around the rate limit (600 requests a minute per key).

Fair use

Don't use the service to attack it or anyone else, or to scan anything other than packages you might install. We may suspend a key that's being abused, and we'll tell you why.

Availability

We aim to keep the service up, but don't promise it will always be available. npryx is built so that if the service is down or slow, it behaves exactly as it does without it.

Liability

To the extent the law allows, the service is provided as is, and our total liability to you is limited to what you've paid us in the 12 months before the claim. We aren't liable for indirect or consequential loss.

Changes and law

We may update these terms; if a change matters, we'll email subscribers before it takes effect. These terms are governed by the laws of New South Wales, Australia.

Contact

support@npryx.dev