|
npryx: see what a package does before npx runs it
npryx is a drop-in for npx that shows you what a package will do before it runs: install scripts, provenance, publish age, downloads, lookalike names and int...
|
84 % |
|
wnpm — inline package vulnerability detector
wnpm is a cybersecurity tool: an inline package vulnerability detector for npm, pnpm and yarn. It checks every dependency against known vulnerability advisor...
|
82 % |
|
FixProve — prove your AI-generated code before it merges
FixProve deterministically verifies that every import, symbol, method, and API call in AI-generated code resolves against your real installed dependencies. Z...
|
82 % |
|
pkgproof: check an npm or PyPI package before it gets installed
Stolen publish tokens, install scripts that fire the moment you add a package, names one keystroke off the real thing. pkgproof reads an npm or PyPI package...
|
82 % |
|
pantry - a fast, modern package manager
A fast, modern, universal package manager for your system. Install pre-built binaries for open source tools with a single command.
|
81 % |
|
packshield — block malicious packages before they land
A background guardian that blocks malicious npm and PyPI packages before they land on your machine. Install once, protected forever.
|
81 % |
|
RepoSafety — Don’t install the take-home yet
A Cursor command that reads an interview repository before you install it. It does not run the project. It does not prove the repo is safe.
|
80 % |
|
DepMesh — dependency vetting for AI-assisted development
|
80 % |
|
Securistry — Private approved npm registry for your team
Securistry is the private, approved npm supply for your team. Mirror, bake, review, install. Stop pulling unreviewed npm updates straight into production.
|
80 % |
|
Packageer - Linux packaging, simplified
You compile, we ship. Stop wrestling with RPM specs, DEBs, and PKGBUILDs. One config, every distro, zero headaches.
|
80 % |
|
nopm - no package manager
nopm is a package manager that does not download packages. It asks Codex to author them locally into no_modules.
|
80 % |
|
NextLNMP — Secure, Clean & Trustworthy LEMP One-Click Installer
NextLNMP: free, open-source one-click LEMP/LNMP stack installer for Linux. Every source package fetched from official upstreams, verified with per-package SH...
|
80 % |
|
Nudeps
|
80 % |
|
tapid | Install packages with evidence
tapid is a JavaScript and TypeScript package manager for a bounded npm-compatible workflow. It records exact package identity and requires registry-declared...
|
80 % |
|
PackageTrack
Know what actually changed between package versions: release notes, cadence and health for every dependency.
|
80 % |
|
Install npm Packages from Pull Requests | pkg.vc
Preview, test, and share npm packages instantly. Install npm package builds from pull requests before merge.
|
79 % |
|
The Bernie Foundation — Keeping the Sunglasses Off Your Supply Chain
The Bernie Foundation provides ongoing engineering work to prevent unmaintained open source dependencies from creating supply chain risk.
|
79 % |
|
Conary — One reversible package model for Linux
Conary Preview is a rollback-first package bridge for installing proven RPM, DEB, and Arch packages across Fedora, Ubuntu, and Arch.
|
79 % |
|
Cache npm dependencies for faster CI | NMC
Stop waiting for npm on every build. Send dependency manifests, get back a pre-built node_modules archive. Cache hits skip the registry entirely.
|
79 % |
|
pkgxray: analyze packages before you install them
Supply-chain security for npm packages, MCP servers, and AI agents. No dependencies, runs locally, and static scans never execute package code.
|
79 % |
Detected social media networks