|
pkgxray: analyze packages before you install them
Supply-chain security for npm packages, MCP servers, and AI agents. No dependencies, runs locally, and static scans never execute package code.
|
87 % |
|
Securistry — Private approved npm registry for your team
Securistry is the private, approved npm supply for your team. Mirror, bake, review, install. Stop pulling unreviewed npm updates straight into production.
|
80 % |
|
Safe npm install: block malware & CVEs | Install Safe
Install Safe makes npm install safe: a drop-in registry proxy that removes vulnerable and malicious package versions before npm resolves them. One config lin...
|
80 % |
|
haymon — private package registry for your software supply chain
Self-hosted private package registry that serves only the packages you let in. Mirrors Packagist, GitHub, GitLab and git for Composer today; npm next.
|
79 % |
|
Keep LTS — security-maintained forks of abandoned npm packages
Drop-in security forks of abandoned npm packages — same API, patched CVEs, regression-tested. Clear the audit finding with a one-line overrides entry, no cod...
|
79 % |
|
pkglens — see inside your packages
Analyze any npm or Composer package in one view: bundle size, dependencies, vulnerabilities, license, maintenance health & alternatives.
|
79 % |
|
PackageScanner - Malware and vulnerability scanner for npm dependencies
PackageScanner detects known malware, known vulnerabilities, and suspicious metadata signals in your npm dependencies to protect against supply-chain attacks.
|
78 % |
|
NextLNMP — Secure, Clean & Trustworthy LEMP One-Click Installer
NextLNMP: free, open-source one-click LEMP/LNMP stack installer for Linux. Every source package fetched from official upstreams, verified with per-package SH...
|
78 % |
|
npmvc — supply chain credentials for npm
Stop supply chain attacks at install time.
|
78 % |
|
npm Package Release Analysis | Pwned Packages
Compare npm package releases, inspect install-script changes, review file diffs, and check OSV advisory context before accepting an update.
|
78 % |
|
DepWall — npm install guardrail & supply-chain firewall for AI agents
DepWall is an install-time guardrail for AI coding agents: it inspects every npm package before it installs — slopsquatting, poisoned lockfiles, and prompt-i...
|
78 % |
|
ForgeRepo™: a free npm, PyPI, Maven and Docker firewall
Free, self hosted package firewall and cache for npm, PyPI, Docker, NuGet, Maven, RubyGems, Composer, RPM and APT. Blocks malicious packages before install.
|
78 % |
|
npmtc — Keep the receipts.
npmtc — npm + pnpm with an audited registry. Every release is sealed with a tamper-proof stamp, kill-switched if it goes bad, and safe for AI agents to read.
|
77 % |
|
RepoD — Secure your software supply chain
RepoD validates, signs, distributes and audits every DEB, RPM, APK, Maven, npm and PyPI package before it reaches your servers. Built-in CVE scanning, CISO a...
|
77 % |
|
Packy - Safer Software Installs
Packy is an early local-first desktop AI friend for safer software installs.
|
77 % |
|
Package management for pacman systems | pacvamp
Install packages, review AUR recipes, and declare your machine’s package choices with pacvamp, a proof-of-concept pacman frontend.
|
77 % |
|
mark shroyer, dot com
|
76 % |
|
DepMesh — dependency vetting for AI-assisted development
|
76 % |
|
bpkg home
|
76 % |
|
px | Run commands across different JavaScript package managers
Command-line application used to run commands across different JavaScript package managers. Switch between npm, yarn and pnpm with ease, without changing you...
|
76 % |
Detected social media networks