|
SafeInstall — Your AI agent installs packages. SafeInstall decides which ones run.
The open, local-first install guard for Claude Code, Codex, and Cursor. Typosquats, hours-old malware releases, and provenance breaks are blocked before npm,...
|
82 % |
|
ShadowCanopy — Know exactly what your AI installs
AI assistants install packages you never chose. ShadowCanopy blocks every dependency by default across npm, PyPI, crates, Go, RubyGems and more — and only le...
|
82 % |
|
wnpm — inline package vulnerability detector
wnpm is a cybersecurity tool: an inline package vulnerability detector for npm, pnpm and yarn. It checks every dependency against known vulnerability advisor...
|
81 % |
|
Packy - Safer Software Installs
Packy is an early local-first desktop AI friend for safer software installs.
|
81 % |
|
pkgproof: check an npm or PyPI package before it gets installed
Stolen publish tokens, install scripts that fire the moment you add a package, names one keystroke off the real thing. pkgproof reads an npm or PyPI package...
|
81 % |
|
Yellow Jack — the self-hosted package firewall
Yellow Jack is a self-hosted package firewall for npm, PyPI, Maven and Docker. Every package fetched through it is checked against published malware advisori...
|
81 % |
|
packproof — install your npm package like a stranger would
packproof runs npm pack, installs the tarball into an empty clean room, then imports every entry point and executes every bin. Catches leaked devDependencies...
|
81 % |
|
SupplyGate — Dependency Firewall for Software Supply Chains
Stop malicious packages before they reach your builds. SupplyGate blocks risky dependencies before installation.
|
80 % |
|
PDMCGuard — Passive Dependency Monitor & Compromise Guard
Supply chain security for local development. Install a single daemon, get alerted when a malicious package is found — even retroactively.
|
80 % |
|
safenpm — Sandboxed npm installs
Drop-in npm install replacement that sandboxes postinstall scripts, catches supply-chain attacks, and shares alerts across a decentralized threat intelligenc...
|
80 % |
|
Voli The Bear
The bear that delivers. A fast, no-admin package manager for Windows, Linux, and macOS. One binary, no scripts, clean uninstalls. Install with one line.
|
80 % |
|
DepWall — npm install guardrail & supply-chain firewall for AI agents
DepWall is an install-time guardrail for AI coding agents: it inspects every npm package before it installs — slopsquatting, poisoned lockfiles, and prompt-i...
|
80 % |
|
GitHub PR Security Scanner | MagAudit Agent
Automated security reviews on every GitHub pull request: leaked secrets, vulnerabilities and risky dependencies, with one-click inline fixes. Hosted in the E...
|
79 % |
|
Supply-chain policy gate for npm, pnpm, yarn, and PyPI | InstallGuard
InstallGuard blocks risky dependencies before install across npm, pnpm, yarn, and PyPI. Catch typosquats, malicious install-time code, publisher churn, and t...
|
79 % |
|
Kovo: critical dependency fixes, verified and merged on autopilot
Kovo watches the lockfiles of your Node.js repositories on GitHub. When a dangerous vulnerability lands, it makes the smallest fix, verifies it in a separate...
|
79 % |
|
Upwarden — The dependency firewall that never breaks your build
Upwarden is a dependency firewall, available managed today with self-hosting coming soon. It sits between your package managers and the registry, stripping m...
|
79 % |
|
Safe npm install: block malware & CVEs | Install Safe
Install Safe makes npm install safe: a drop-in registry proxy that removes vulnerable and malicious package versions before npm resolves them. One config lin...
|
79 % |
|
CipherBond — local-first data protection for AI
CipherBond pseudonymizes credentials, PII, and proprietary code before your prompts leave the device, swapping them for coherent stand-ins and restoring the...
|
78 % |
|
NextLNMP — Secure, Clean & Trustworthy LEMP One-Click Installer
NextLNMP: free, open-source one-click LEMP/LNMP stack installer for Linux. Every source package fetched from official upstreams, verified with per-package SH...
|
78 % |
|
Sigil — AI Agent Supply Chain Security Scanner
Sigil scans npm, PyPI, and MCP server packages for supply chain threats before they execute. Eight-phase static analysis with quarantine. Free CLI, MCP serve...
|
78 % |
Detected social media networks