|
CipherBond — local-first data protection for AI
CipherBond pseudonymizes credentials, PII, and proprietary code before your prompts leave the device, swapping them for coherent stand-ins and restoring the...
|
81 % |
|
NextLNMP — Secure, Clean & Trustworthy LEMP One-Click Installer
NextLNMP: free, open-source one-click LEMP/LNMP stack installer for Linux. Every source package fetched from official upstreams, verified with per-package SH...
|
81 % |
|
SafeInstall — Your AI agent installs packages. SafeInstall decides which ones run.
The open, local-first install guard for Claude Code, Codex, and Cursor. Typosquats, hours-old malware releases, and provenance breaks are blocked before npm,...
|
81 % |
|
Packy - Safer Software Installs
Packy is an early local-first desktop AI friend for safer software installs.
|
81 % |
|
FixProve — prove your AI-generated code before it merges
FixProve deterministically verifies that every import, symbol, method, and API call in AI-generated code resolves against your real installed dependencies. Z...
|
81 % |
|
pkgxray: analyze packages before you install them
Supply-chain security for npm packages, MCP servers, and AI agents. No dependencies, runs locally, and static scans never execute package code.
|
81 % |
|
mark shroyer, dot com
|
80 % |
|
alint: a language-agnostic linter for repository files
alint is a linter for repository files: a README in every package, pinned workflow actions, no committed .env. One .alint.yml, in CI and your editor.
|
80 % |
|
Packageer - Linux packaging, simplified
You compile, we ship. Stop wrestling with RPM specs, DEBs, and PKGBUILDs. One config, every distro, zero headaches.
|
80 % |
|
ShadowCanopy — Know exactly what your AI installs
AI assistants install packages you never chose. ShadowCanopy blocks every dependency by default across npm, PyPI, crates, Go, RubyGems and more — and only le...
|
80 % |
|
pkgproof: check an npm or PyPI package before it gets installed
Stolen publish tokens, install scripts that fire the moment you add a package, names one keystroke off the real thing. pkgproof reads an npm or PyPI package...
|
80 % |
|
tapid | Install packages with evidence
tapid is a JavaScript and TypeScript package manager for a bounded npm-compatible workflow. It records exact package identity and requires registry-declared...
|
80 % |
|
A Node.js package manager | aube
Run project scripts with automatic dependency checks, share packages across projects, and use supported npm, pnpm, Yarn, and Bun lockfiles.
|
80 % |
|
Trojaino — Inspect before you install | Blockhouse Software
A local, deterministic install gate for AI tools and downloaded software. Scan first. Review the evidence. Then decide what runs.
|
79 % |
|
CarePackage | A simple project management tool
|
79 % |
|
refuse — open-source shim that refuses vulnerable packages
Open-source shim for npm, pip, cargo, gem, go and 13 other package managers. Refuses vulnerable installs whether you ran them, your agent did, or CI did. 362...
|
79 % |
|
Kovo: critical dependency fixes, verified and merged on autopilot
Kovo watches the lockfiles of your Node.js repositories on GitHub. When a dangerous vulnerability lands, it makes the smallest fix, verifies it in a separate...
|
79 % |
|
Safe npm install: block malware & CVEs | Install Safe
Install Safe makes npm install safe: a drop-in registry proxy that removes vulnerable and malicious package versions before npm resolves them. One config lin...
|
79 % |
|
ForgeRepo™: a free npm, PyPI, Maven and Docker firewall
Free, self hosted package firewall and cache for npm, PyPI, Docker, NuGet, Maven, RubyGems, Composer, RPM and APT. Blocks malicious packages before install.
|
79 % |
|
As if it mattered.
|
78 % |
Detected social media networks