← Latest products

DepsGuard

One command to harden NPM/pnpm/yarn/bun/uv configs. Harden your package manager configs against supply chain attacks. I kept seeing every npm/pnpm/yarn/bun/uv supply chain post end with the same advice (set a minimum release age, turn off install scripts), and while I know cooldowns are "controversial", they do work.

CLIOpen source

383 stars · GitHubexternal site

Visit github.comexternal site

Reactions (1)

Similar products

by description similarity

  1. Socket web extension

    chrome.google.com

    free NPM supply chain protection

    Hacker News10 pts

  2. Tilth

    github.com

    I spent tokens so my agents would stop wasting them (~4k Rust)

    Hacker News10 pts

  3. Tips to stay safe from NPM supply chain attacks

    github.com

    [Updated for AI 🤖] Continuous updates on how to stay safe from NPM supply chain attacks

    Hacker News96 pts

  4. Modshim

    github.com

    A new alternative to monkey-patching in Python

    Hacker News109 pts

  5. Safe-install

    npmjs.com

    safer NPM installs with trusted build dependencies

    Hacker News19 pts