← Latest products

Safe-NPM

only install packages that are +90 days old. Safely install NPM packages. This past quarter has been awash with sophisticated npm supply chain attacks like [Shai-Hulud]( https://www.cisa.gov/news-events/alerts/2025/09/23/widesprea...

Open source

193 stars · GitHubexternal site

Visit github.comexternal site

Reactions (1)

Similar products

by description similarity

  1. Safe-install

    npmjs.com

    safer NPM installs with trusted build dependencies

    Hacker News19 pts

  2. Auto-Unpublish NPM Packages Published Outside CI

    github.com

    Plugins for Tangent

    Hacker News6 pts

  3. Tips to stay safe from NPM supply chain attacks

    github.com

    [Updated for AI 🤖] Continuous updates on how to stay safe from NPM supply chain attacks

    Hacker News96 pts

  4. DepsGuard

    github.com

    One command to harden NPM/pnpm/yarn/bun/uv configs

    Hacker News40 pts

  5. jpm

    getjpm.sh

    a JavaScript package manager in Rust, every line by Claude Code

    Hacker News6 pts