Check a new dependency version against npm advisories
When a dependency enters your Notion tracker, get an advisory lookup for its exact version and make the first review step easier to complete.
Trigger
New Page
Triggers when a new page is added to a Notion database.
Action
Query Bulk Security Advisories
Tool to bulk query security advisories for multiple npm packages. Use when you need to check vulnerability information for multiple packages and versions at once.
Why this helps
Dependency intake adds another small review step, and that step can be lost when there are many moving pieces.
- Run a security lookup at the point a dependency is recorded.
- Make version-specific review part of intake.
- Reduce reliance on remembering a separate follow-up.
Setup
Build it in a few focused steps.
- 1Connect Notion and Npm to Notis once in the portal.
- 2Create an automation in the portal or ask Notis to check new dependency rows for npm advisories.
- 3Give Notis one plain-language instruction to use the package name and version in each new row and summarize matching advisory results.
- 4Choose the Notion New Page trigger scoped to the dependency data source and a channel for run reports.
- 5Test by adding one real package and version to the tracker.
Questions about this workflow
Does this run for every new page in the workspace?
Scope the New Page trigger to the dependency data source to focus on newly added rows there.
What details help the lookup?
An exact npm package name and version make the result more useful.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Notion to Npm. A trigger fires from one place; an action lands in another.
Notion triggers
Npm actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Delete User Token (Legacy)
Tool to delete a user authentication token using the legacy endpoint. Use when you need to revoke or remove a specific token from the npm registry.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Get All Packages Download Count Point
Get total npm registry download statistics for all packages for a specified time period. Returns aggregate download counts across the entire npm registry with start/end dates. Supports preset periods (last-day, last-week, last-month, last-year) or custom date ranges (YYYY-MM-DD:YYYY-MM-DD).
All Page Events
Triggers when any Notion page is created or updated across the workspace.
Get NPM Download Counts Point
Get npm package download statistics for a specified time period. Returns total download counts with start/end dates for single packages, scoped packages, or bulk queries (up to 128 packages). Supports preset periods (last-day, last-week, last-month, last-year) or custom date ranges (YYYY-MM-DD:YYYY-MM-DD).
Comment Created
Triggers when a new comment is created in Notion. Optional `page_id` filter scopes to comments on a specific page. When omitted, fires for any new comment in the workspace the integration has access to. Requires the 'Read comments' capability on the Notion integration. If a connection was authorized before that capability was enabled, the user must re-authorize the connection for comment events to flow.
Get NPM Package Download Counts Over Date Range
Tool to get download counts for an npm package over a specified date range. Use when you need historical daily download data.
New Comment
Triggers when a new comment is added to a specified Notion block or page.
Get All NPM Packages Download Counts by Period
Tool to get daily download counts for all npm packages over a specified period. Use when you need aggregate download statistics across the entire npm registry.
Database Created
Triggers when a new Notion database (the container) is created. A database is the post-2025-09-03 container that holds one or more data sources. This trigger fires for the container's creation event (`database.created`), distinct from `NOTION_DATASOURCE_CREATED` which fires when a new data source is added to an existing database. Most customers calling Notion's `POST /v1/databases` (the legacy API) or creating a database via the Notion UI will see this event. Adding a new data source to an existing database fires `data_source.created` instead — use `NOTION_DATASOURCE_CREATED` for that. Notion's payload puts `entity.type: "block"` (the container is a `child_database` block in the content tree) and `entity.id` is the database id.
Get Registry Changes Feed
Tool to get a stream of registry changes for replication purposes. Returns CouchDB-style change feed for following registry updates.
Data Source Created
Triggers when a new Notion data source is created. Fires workspace-wide. The payload's `data.parent` carries the data source's tree parent (typically the teamspace) for downstream filtering. A single template-based database creation can fire multiple `data_source.created` events at once — one per data source the template instantiates.
Get NPM Registry Meta
Retrieves npm registry metadata via meta endpoints. Use 'ping' to verify registry connectivity or 'whoami' to get the authenticated username.
Data Source Schema Updated
Triggers when a Notion data source's schema is updated. Fires on column add / remove / rename. Payload includes `data.updated_properties: [{id, name, action}]` so consumers can discriminate the kind of change downstream. Optional `data_source_id` filter scopes to schema changes on a single data source. When omitted, fires for any schema change in the workspace the integration has access to. Note: adding a column also fires `page.properties_updated` once per existing row in the data source. Customers wanting a single structural-change signal should use this trigger.
Get NPM Package Version Downloads (Last 7 Days)
Tool to get download counts for specific versions of a package over the last 7 days. Use when you need to understand which versions are most popular.
Connect any two apps with Notis in the middle.
Notion and Npm, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Npm.