← Latest products

Refuse

Block vulnerable package installs for you and your AI. Refuse sits in front of npm, pip, cargo, gem, go + 13 more package managers and refuses known-vulnerable installs before they hit disk — the moment you (or your coding agent) run them.

Visit refuse.devexternal site

Reactions (1)

Similar products

by description similarity

  1. DepsGuard

    github.com

    One command to harden NPM/pnpm/yarn/bun/uv configs

    Hacker News40 pts

  2. CLI that helps AI agents avoid vulnerable dependencies

    github.com

    deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, GitHub Actions, and more. It runs locally as a CLI and as an MCP server, comes with a skill, and a hook.

    Hacker News26 pts

  3. Auto-Unpublish NPM Packages Published Outside CI

    github.com

    Plugins for Tangent

    Hacker News6 pts

  4. Safe-install

    npmjs.com

    safer NPM installs with trusted build dependencies

    Hacker News19 pts

  5. Yolobox

    github.com

    Run AI coding agents with full sudo without nuking home dir

    Hacker News122 pts