|
packproof — install your npm package like a stranger would
packproof runs npm pack, installs the tarball into an empty clean room, then imports every entry point and executes every bin. Catches leaked devDependencies...
|
84 % |
|
wnpm — inline package vulnerability detector
wnpm is a cybersecurity tool: an inline package vulnerability detector for npm, pnpm and yarn. It checks every dependency against known vulnerability advisor...
|
83 % |
|
pkgxray: analyze packages before you install them
Supply-chain security for npm packages, MCP servers, and AI agents. No dependencies, runs locally, and static scans never execute package code.
|
83 % |
|
QuickRun - run any git repository with one click | QuickRun
QuickRun clones a repository, checks the tools, asks for the values it declares, starts it and opens the address - from the GitHub page you found it on. Wind...
|
82 % |
|
Cache npm dependencies for faster CI | NMC
Stop waiting for npm on every build. Send dependency manifests, get back a pre-built node_modules archive. Cache hits skip the registry entirely.
|
82 % |
|
DepWall — npm install guardrail & supply-chain firewall for AI agents
DepWall is an install-time guardrail for AI coding agents: it inspects every npm package before it installs — slopsquatting, poisoned lockfiles, and prompt-i...
|
82 % |
|
pkgproof: check an npm or PyPI package before it gets installed
Stolen publish tokens, install scripts that fire the moment you add a package, names one keystroke off the real thing. pkgproof reads an npm or PyPI package...
|
82 % |
|
A Node.js package manager | aube
Run project scripts with automatic dependency checks, share packages across projects, and use supported npm, pnpm, Yarn, and Bun lockfiles.
|
82 % |
|
Reporun — know what a repo needs before you run it
Reporun is a free desktop app for macOS and Windows. Paste a public GitHub or GitLab link and see what the project needs, what your computer already has, and...
|
82 % |
|
ToTheos
An async AI engineering platform that runs AI prompts, shell commands, validation scripts, and auto-fix workflows inside GitHub infrastructure.
|
81 % |
|
alint: a language-agnostic linter for repository files
alint is a linter for repository files: a README in every package, pinned workflow actions, no committed .env. One .alint.yml, in CI and your editor.
|
80 % |
|
Install npm Packages from Pull Requests | pkg.vc
Preview, test, and share npm packages instantly. Install npm package builds from pull requests before merge.
|
80 % |
|
px | Run commands across different JavaScript package managers
Command-line application used to run commands across different JavaScript package managers. Switch between npm, yarn and pnpm with ease, without changing you...
|
80 % |
|
npmvc — supply chain credentials for npm
Stop supply chain attacks at install time.
|
80 % |
|
Supply-chain policy gate for npm, pnpm, yarn, and PyPI | InstallGuard
InstallGuard blocks risky dependencies before install across npm, pnpm, yarn, and PyPI. Catch typosquats, malicious install-time code, publisher churn, and t...
|
80 % |
|
Kratex
Supply-chain runtime guard for Node.js.
|
80 % |
|
Patchlight · AI code review & security monitoring for GitHub
Whole-repo security scans and automated PR code review. No per-seat pricing, no subscriptions, pay only for what you use.
|
80 % |
|
targate — Stop untrusted npm code before it runs
targate inspects npm packages in quarantine, applies a deterministic security policy and installs them only when they pass.
|
80 % |
|
chainoftrust.dev
Install-time trust reports for agent-facing tooling. Paste a repository URL and see what installing it would actually do.
|
80 % |
|
ForgeRepo™: a free npm, PyPI, Maven and Docker firewall
Free, self hosted package firewall and cache for npm, PyPI, Docker, NuGet, Maven, RubyGems, Composer, RPM and APT. Blocks malicious packages before install.
|
80 % |
Detected social media networks