safedep/pmg

PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.

Go

554

48

15 contributors

Apache License 2.0

FeaturedAdvertise to 180K+ monthly visitors

Enterprise AI Gateway Built For Scale: Route, Govern, and Secure All Your AI Traffic

a benchmark for personal agents

Momentum

How fast safedep/pmg is gaining stars, and where it lands on Trendshift and GitHub Trending

Activity and trending

Stars, forks and merged pull requests each day or month, lined up with the repository's rank on Trendshift Trending

Aug 26 – Oct 25, 2026

Stars +53 in 61 days

23

Forks +7 in 61 days

1

Merged PRs 97 in 61 days

6

Trendshift Trendingwhere the repository ranked each day it made the top 25

Not in the Trendshift top 25 in this period

Aug 26Sep 3Sep 11Sep 19Sep 27Oct 5Oct 13Oct 21

Stars, forks, merged pull requests and Trendshift Trending rank, by day
Day	Stars gained	Forks gained	Merged PRs
Wed, Aug 26, 2026	+1	+0	2
Thu, Aug 27, 2026	+1	+0	1
Fri, Aug 28, 2026	+0	+0	0
Sat, Aug 29, 2026	+0	+0	0
Sun, Aug 30, 2026	+0	+0	0
Mon, Aug 31, 2026	+2	+0	2
Tue, Sep 1, 2026	+0	+0	0
Wed, Sep 2, 2026	+1	+0	1
Thu, Sep 3, 2026	+0	+0	1
Fri, Sep 4, 2026	+0	+0	1
Sat, Sep 5, 2026	+1	+0	1
Sun, Sep 6, 2026	+1	+0	1
Mon, Sep 7, 2026	+0	+1	4
Tue, Sep 8, 2026	+1	+0	0
Wed, Sep 9, 2026	+1	+0	5
Thu, Sep 10, 2026	+0	+0	5
Fri, Sep 11, 2026	+0	+0	4
Sat, Sep 12, 2026	+0	+0	4
Sun, Sep 13, 2026	+1	+1	2
Mon, Sep 14, 2026	+0	+0	4
Tue, Sep 15, 2026	+0	+0	2
Wed, Sep 16, 2026	+0	+0	3
Thu, Sep 17, 2026	+0	+0	1
Fri, Sep 18, 2026	+0	+0	1
Sat, Sep 19, 2026	+0	+1	0
Sun, Sep 20, 2026	+0	+0	0
Mon, Sep 21, 2026	+0	+0	2
Tue, Sep 22, 2026	+0	+0	1
Wed, Sep 23, 2026	+0	+0	0
Thu, Sep 24, 2026	+1	+0	2
Fri, Sep 25, 2026	+0	+0	1
Sat, Sep 26, 2026	+0	+0	0
Sun, Sep 27, 2026	+23	+0	0
Mon, Sep 28, 2026	+0	+1	0
Tue, Sep 29, 2026	+0	+1	3
Wed, Sep 30, 2026	+2	+0	1
Thu, Oct 1, 2026	+0	+0	0
Fri, Oct 2, 2026	+0	+0	0
Sat, Oct 3, 2026	+2	+0	4
Sun, Oct 4, 2026	+1	+0	0
Mon, Oct 5, 2026	+1	+0	2
Tue, Oct 6, 2026	+0	+0	3
Wed, Oct 7, 2026	+1	+0	2
Thu, Oct 8, 2026	+0	+1	1
Fri, Oct 9, 2026	+0	+0	4
Sat, Oct 10, 2026	+0	+1	0
Sun, Oct 11, 2026	+2	+0	3
Mon, Oct 12, 2026	+4	+0	1
Tue, Oct 13, 2026	+1	+0	4
Wed, Oct 14, 2026	+0	+0	1
Thu, Oct 15, 2026	+1	+0	1
Fri, Oct 16, 2026	+0	+0	5
Sat, Oct 17, 2026	+0	+0	0
Sun, Oct 18, 2026	+1	+0	0
Mon, Oct 19, 2026	+2	+0	2
Tue, Oct 20, 2026	+0	+0	2
Wed, Oct 21, 2026	+0	+0	1
Thu, Oct 22, 2026	+0	+0	6
Fri, Oct 23, 2026	+0	+0	0
Sat, Oct 24, 2026	+1	+0	0
Sun, Oct 25, 2026	+0	+0	0
Total	+53	+7	97

#1 on the list
Rank that day
Not trending

Mentions and achievements

Where people are talking about safedep/pmg, and every badge it has earned

Oct 152 posts
- PMG now uses eBPF for machine-wide (including containers) enforcement of malicious package protection. Built particularly for GitHub Actions and cloud hosted AI coding agents who are known to be very…
  Read full on X, posted by @abh1sek
  @abh1sek · x.com
- and this is just the start of the line: → network policy with baselining, drop into any CI or agent env → automatic policy tuning via SafeDep Cloud → centralized policy rollout → real-time C2…
  Read full on X, posted by @safedepio
  @safedepio · x.com
28 days earlier
Sep 171 post
- PMG v0.29.0 is out. Windows support, a new package manager family, and you can now sandbox any program, not just installs. quick thread on the major changes ↓🧵
  Read full on X, posted by @safedepio
  @safedepio · x.com
20 days earlier
Aug 281 post
- Experimental Rust/Cargo support out in PMG. - Dependency Cooldown - Build-time sandbox Supports both MacOS (Seatbelt), Linux (Landlock + seccomp-notify)
  Read full on X, posted by @abh1sek
  @abh1sek · x.com
13 days earlier
Aug 151 post2 posts
- Excellent DevEx writing Omarchy plugins. QuickShell and QML made it very easy to plug in to the Omarchy experience. Here is how to get started.
  Read full on X, posted by @abh1sek
  @abh1sek · x.com
- Coming out nicely. Reliable interception of Go packages with support for package control coming soon.
  Read full on X, posted by @abh1sek
  @abh1sek · x.com
Aug 131 post
- The next LiteLLM like supply chain incident won’t be defended by luck. It needs reliable controls. Deterministic and enforcing. Not just AI classification.
  Read full on X, posted by @abh1sek
  @abh1sek · x.com
Aug 121 post
- Am I affected? Install Baileys only from the upstream project (WhiskeySockets/Baileys). Check your dependencies for forks and libsignal-node impersonators. Our post lists the confirmed packages and…
  Read full on X, posted by @safedepio
  @safedepio · x.com
Aug 101 post
- That defeats HTTP egress filtering and proxy inspection. It works from hardened build networks that block outbound web traffic entirely, and it leaves nothing in your web proxy logs. The…
  Read full on X, posted by @safedepio
  @safedepio · x.com
Aug 51 post
- Blocking install scripts stops code that runs during npm install. But a growing share of malicious packages run their payload at import time, when your app loads the package. No install script…
  Read full on X, posted by @safedepio
  @safedepio · x.com