nodejs · RafaelGSS · Jan 24, 2026
diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
@@ -1,11 +1,6 @@
 # -- Node.js security ecosystem triage members 
 # These owners will be automatically assigned to any PRs
 # opened for vulnerabilities to be added to the database
-# of the npm community ecosystem
-/vuln/npm/    @nodejs/ecosystem-security
-
-# Currently setting the same ecosystem team to help
-# review any core related PRs as well
 /vuln/core/   @mhdawson @rvagg @vdeturckheim @RafaelGSS
 
 # -- Node.js Security WG processes 

diff --git a/.github/workflows/update-npm-index.yml b/.github/workflows/update-npm-index.yml
diff --git a/package.json b/package.json
@@ -4,7 +4,6 @@
   "scripts": {
     "test": "node --test",
     "validate": "node tools/vuln_valid",
-    "create-npm-index": "node tools/create_index/create_npm_index.js",
     "create-core-index": "node tools/create_index/create_core_index.js"
   },
   "keywords": [],

diff --git a/tools/create_index/create_npm_index.js b/tools/create_index/create_npm_index.js
diff --git a/tools/create_index/index_generator.js b/tools/create_index/index_generator.js
@@ -52,8 +52,6 @@ const writeIndex = function(data, vulnDirectoryPath) {
 
   if(vulnDirectoryPath === './vuln/core/') {
     console.log('Succesfully wrote ' + vulnDirectoryPath + 'index.json for core vulnerabilities.')
-  } else if(vulnDirectoryPath === './vuln/npm/') {
-    console.log('Succesfully wrote ' + vulnDirectoryPath + 'index.json for npm vulnerabilities.')
   }
 }
 

diff --git a/vuln/npm/1.json b/vuln/npm/1.json
diff --git a/vuln/npm/10.json b/vuln/npm/10.json
diff --git a/vuln/npm/100.json b/vuln/npm/100.json
diff --git a/vuln/npm/101.json b/vuln/npm/101.json
diff --git a/vuln/npm/102.json b/vuln/npm/102.json
diff --git a/vuln/npm/104.json b/vuln/npm/104.json
diff --git a/vuln/npm/106.json b/vuln/npm/106.json
diff --git a/vuln/npm/107.json b/vuln/npm/107.json
diff --git a/vuln/npm/108.json b/vuln/npm/108.json
diff --git a/vuln/npm/109.json b/vuln/npm/109.json
diff --git a/vuln/npm/11.json b/vuln/npm/11.json
diff --git a/vuln/npm/112.json b/vuln/npm/112.json