← 최신 프로덕트

Auto-Unpublish NPM Packages Published Outside CI

Plugins for Tangent. A lot of vendors and open-source projects shared guidance on protecting users from downloading malicious NPM packages after the Shai-Hulud campaign — but almost nothing focused on protecting maintainers from accidentally (or maliciously) publishing them.

오픈소스

2 스타 · GitHub외부 사이트

github.com 방문외부 사이트

반응 (1)

비슷한 프로덕트

설명이 비슷한 순

  1. Safe-NPM

    github.com

    only install packages that are +90 days old

    Hacker News90점

  2. Socket web extension

    chrome.google.com

    free NPM supply chain protection

    Hacker News10점

  3. Tips to stay safe from NPM supply chain attacks

    github.com

    [Updated for AI 🤖] Continuous updates on how to stay safe from NPM supply chain attacks

    Hacker News96점

  4. Safe-install

    npmjs.com

    safer NPM installs with trusted build dependencies

    Hacker News19점

  5. DepsGuard

    github.com

    One command to harden NPM/pnpm/yarn/bun/uv configs

    Hacker News40점