|
wnpm — inline package vulnerability detector
wnpm is a cybersecurity tool: an inline package vulnerability detector for npm, pnpm and yarn. It checks every dependency against known vulnerability advisor...
|
85 % |
|
Better npm | Inspect npm packages before you run them
Inspect npm packages for typosquats, risky install scripts, known vulnerabilities, and malware signals before they run. Free CLI; optional bring-your-own-key...
|
84 % |
|
Lazaret: quarantine for your dependencies
Lazaret scans your code and the npm and PyPI packages it depends on for injection bugs, leaked secrets, hidden install-time payloads and known-vulnerable ver...
|
84 % |
|
Securistry — Private approved npm registry for your team
Securistry is the private, approved npm supply for your team. Mirror, bake, review, install. Stop pulling unreviewed npm updates straight into production.
|
83 % |
|
Safe npm install: block malware & CVEs | Install Safe
Install Safe makes npm install safe: a drop-in registry proxy that removes vulnerable and malicious package versions before npm resolves them. One config lin...
|
83 % |
|
SafeInstall — Your AI agent installs packages. SafeInstall decides which ones run.
The open, local-first install guard for Claude Code, Codex, and Cursor. Typosquats, hours-old malware releases, and provenance breaks are blocked before npm,...
|
82 % |
|
npmvc — supply chain credentials for npm
Stop supply chain attacks at install time.
|
82 % |
|
pkgxray: analyze packages before you install them
Supply-chain security for npm packages, MCP servers, and AI agents. No dependencies, runs locally, and static scans never execute package code.
|
82 % |
|
ForgeRepo™: a free npm, PyPI, Maven and Docker firewall
Free, self hosted package firewall and cache for npm, PyPI, Docker, NuGet, Maven, RubyGems, Composer, RPM and APT. Blocks malicious packages before install.
|
82 % |
|
pantry - a fast, modern package manager
A fast, modern, universal package manager for your system. Install pre-built binaries for open source tools with a single command.
|
81 % |
|
snpm - A Rust-native package manager for JavaScript
snpm is a Rust-native package manager shaped around pnpm-style workflows: shared package store, workspace fan-out, security-first defaults, and lockfile impo...
|
81 % |
|
Sigil — AI Agent Supply Chain Security Scanner
Sigil scans npm, PyPI, and MCP server packages for supply chain threats before they execute. Eight-phase static analysis with quarantine. Free CLI, MCP serve...
|
81 % |
|
npryx: see what a package does before npx runs it
npryx is a drop-in for npx that shows you what a package will do before it runs: install scripts, provenance, publish age, downloads, lookalike names and int...
|
80 % |
|
packshield — block malicious packages before they land
A background guardian that blocks malicious npm and PyPI packages before they land on your machine. Install once, protected forever.
|
79 % |
|
ShadowCanopy — Know exactly what your AI installs
AI assistants install packages you never chose. ShadowCanopy blocks every dependency by default across npm, PyPI, crates, Go, RubyGems and more — and only le...
|
79 % |
|
pkgproof: check an npm or PyPI package before it gets installed
Stolen publish tokens, install scripts that fire the moment you add a package, names one keystroke off the real thing. pkgproof reads an npm or PyPI package...
|
79 % |
|
npmtc — Keep the receipts.
npmtc — npm + pnpm with an audited registry. Every release is sealed with a tamper-proof stamp, kill-switched if it goes bad, and safe for AI agents to read.
|
78 % |
|
pkgui.com
Check npm and PyPI package versions and create updated package.json and requirements.txt files.
|
78 % |
|
Package Shield - Secure Package Gateway
Automated package security gateway for AWS CodeArtifact. Scan, approve, and serve PyPI and RubyGems packages from your own cloud account.
|
78 % |
|
Zapa Guard | Secure Package Proxy
ZapaGuard - Next-Generation Cloud Security & Monitoring
|
78 % |
Detected social media networks