DepsGuard
One command to harden NPM/pnpm/yarn/bun/uv configs. Harden your package manager configs against supply chain attacks. I kept seeing every npm/pnpm/yarn/bun/uv supply chain post end with the same advice (set a minimum release age, turn off install scripts), and while I know cooldowns are "controversial", they do work.
CLI오픈소스
반응 (1)
비슷한 프로덕트
설명이 비슷한 순
Socket web extension
chrome.google.comfree NPM supply chain protection
Tilth
github.comI spent tokens so my agents would stop wasting them (~4k Rust)
[Updated for AI 🤖] Continuous updates on how to stay safe from NPM supply chain attacks
Modshim
github.comA new alternative to monkey-patching in Python
Safe-install
npmjs.comsafer NPM installs with trusted build dependencies