/**
 * X-Ray NPM Package Inspector
 *
 * Downloads package metadata from registry.npmjs.org, analyses it for risk
 * signals, and optionally scans the tarball contents (Pro/deep scan).
 * Uses only Node.js built-ins (https module) — no new dependencies.
 */
import type { XRayResult } from './types.js';
/**
 * Inspect an npm package for hidden risk.
 *
 * @param packageName - npm package name (e.g. "lodash", "@scope/pkg")
 * @param deep - If true, downloads and scans the tarball (Pro feature)
 */
export declare function inspectNpmPackage(packageName: string, deep?: boolean): Promise<XRayResult>;
