|
SafeInstall — Your AI agent installs packages. SafeInstall decides which ones run.
The open, local-first install guard for Claude Code, Codex, and Cursor. Typosquats, hours-old malware releases, and provenance breaks are blocked before npm,...
|
85 % |
|
DepWall — npm install guardrail & supply-chain firewall for AI agents
DepWall is an install-time guardrail for AI coding agents: it inspects every npm package before it installs — slopsquatting, poisoned lockfiles, and prompt-i...
|
85 % |
|
Safe npm install: block malware & CVEs | Install Safe
Install Safe makes npm install safe: a drop-in registry proxy that removes vulnerable and malicious package versions before npm resolves them. One config lin...
|
85 % |
|
Hound — Linux endpoint security in one agent
Linux endpoint security platform — threat detection, supply-chain protection, vulnerability scanning, file integrity monitoring, USB device control, and EDR...
|
85 % |
|
ForgeRepo™: a free npm, PyPI, Maven and Docker firewall
Free, self hosted package firewall and cache for npm, PyPI, Docker, NuGet, Maven, RubyGems, Composer, RPM and APT. Blocks malicious packages before install.
|
85 % |
|
Sigil — AI Agent Supply Chain Security Scanner
Sigil scans npm, PyPI, and MCP server packages for supply chain threats before they execute. Eight-phase static analysis with quarantine. Free CLI, MCP serve...
|
84 % |
|
safenpm — Sandboxed npm installs
Drop-in npm install replacement that sandboxes postinstall scripts, catches supply-chain attacks, and shares alerts across a decentralized threat intelligenc...
|
84 % |
|
depgaze — Dependency execution intelligence for CI pipelines
depgaze observes what npm and PyPI packages do during installation inside an isolated sandbox and returns an AI-powered allow-or-block verdict. Embed it in y...
|
84 % |
|
Argus — Security gateway for AI agent & MCP package installation
Argus is an open-source static-analysis CLI that inspects every package an AI agent or MCP server tries to install. It runs SAST on the actual source code an...
|
84 % |
|
SCDLP — Supply Chain DLP for macOS
SCDLP is a macOS Endpoint Security extension that blocks unknown processes from reading your credentials and secrets — stopping supply-chain exfiltration in...
|
84 % |
|
MeshSig — Cryptographic security layer for AI agents
Ed25519 identity, signed messages, trust scoring for AI agents. Works with LangChain, CrewAI, AutoGen, OpenClaw. CLI, MCP Server, live dashboard. Open source.
|
83 % |
|
ScanMe - Enterprise Vulnerability Scanning Platform
|
82 % |
|
ScanMe - Enterprise Vulnerability Scanning Platform
|
82 % |
|
fend - sandbox npm install
A sandboxed runtime for npm install and friends. Project deps execute in a micro-VM with zero access to your home directory.
|
82 % |
|
packshield — block malicious packages before they land
A background guardian that blocks malicious npm and PyPI packages before they land on your machine. Install once, protected forever.
|
82 % |
|
SCPM - package manager for the trustless world
SCPM is a security-focused Node package manager that waits for meticulous AI analysis of exact dependency contents on our servers before install continues.
|
82 % |
|
Packy - Safer Software Installs
Packy is an early local-first desktop AI friend for safer software installs.
|
82 % |
|
pkgxray: analyze packages before you install them
Supply-chain security for npm packages, MCP servers, and AI agents. No dependencies, runs locally, and static scans never execute package code.
|
82 % |
|
GopherMind — an AI coding agent that asks first
A single Go binary that turns your own OpenAI-compatible model into a terminal coding agent. Local llama.cpp, Ollama, LM Studio, vLLM or hosted. Every mutati...
|
81 % |
|
ReversingLabs Spectra Assure Community
ReversingLabs Spectra Assure Community
|
81 % |
Detected social media networks