Footer

Your go-to destination for discovering trending open-source projects and uncovering the insights that matter

Legal

  • Terms and conditions
  • Privacy policy

More

  • Pricing
  • Advertise
  • onedump
  • gosnakego
  • Contact us

Social

  • X (Twitter)
  • GitHub
Trendshift owl
What they build speaks louder than words
© 2026 Trendshift, created by Julian Li with ❤️
SignalAdvertise
Trendshift
SignalAdvertise
Sign in
Trendshift owl

Discover trends that matter

SignalAdvertise
DailyWeeklyMonthlyYearly
Live mentionsTopics
RepositoriesDevelopers
InsightsStats
Bifrost
Bifrost

AikidoSec/safe-chain

Protect against malicious code installed via npm, yarn, pnpm, npx, pnpx, pip, uv and poetry with Aikido Safe Chain. Free to use, no tokens required.

Visit GitHub
JavaScript
1.8k
128
26 contributors
Custom license
website
AchievementsView all →
FeaturedAdvertise to 180K+ monthly visitors
Bifrost

Fastest Enterprise AI Gateway for Routing, Governing, and Securing all your AI Traffic

Momentum

How fast AikidoSec/safe-chain is gaining stars, and where it lands on Trendshift and GitHub Trending

Activity and trending

Stars, forks and merged pull requests each day or month, lined up with the repository's rank on Trendshift Trending

Sep 5 – Nov 4, 2026

Stars +102 in 61 days

0510
10

Forks +11 in 61 days

01
1

Merged PRs 65 in 61 days

0246
5

Trendshift Trendingwhere the repository ranked each day it made the top 25

Not in the Trendshift top 25 in this period

Sep 5Sep 13Sep 21Sep 29Oct 7Oct 15Oct 23Oct 31
The left and right arrow keys step from day to day; Home and End go to the first and the last

Stars, forks, merged pull requests and Trendshift Trending rank, by day
DayStars gainedForks gainedMerged PRs
Sat, Sep 5, 2026+1+10
Sun, Sep 6, 2026+0+00
Mon, Sep 7, 2026+1+14
Tue, Sep 8, 2026+3+02
Wed, Sep 9, 2026+3+04
Thu, Sep 10, 2026+1+03
Fri, Sep 11, 2026+1+00
Sat, Sep 12, 2026+0+00
Sun, Sep 13, 2026+0+00
Mon, Sep 14, 2026+1+02
Tue, Sep 15, 2026+1+01
Wed, Sep 16, 2026+0+01
Thu, Sep 17, 2026+3+11
Fri, Sep 18, 2026+2+00
Sat, Sep 19, 2026+0+00
Sun, Sep 20, 2026+0+00
Mon, Sep 21, 2026+2+02
Tue, Sep 22, 2026+2+01
Wed, Sep 23, 2026+3+10
Thu, Sep 24, 2026+0+03
Fri, Sep 25, 2026+2+03
Sat, Sep 26, 2026+3+00
Sun, Sep 27, 2026+2+00
Mon, Sep 28, 2026+0+02
Tue, Sep 29, 2026+1+14
Wed, Sep 30, 2026+0+00
Thu, Oct 1, 2026+1+05
Fri, Oct 2, 2026+0+02
Sat, Oct 3, 2026+1+00
Sun, Oct 4, 2026+2+00
Mon, Oct 5, 2026+1+01
Tue, Oct 6, 2026+1+00
Wed, Oct 7, 2026+2+01
Thu, Oct 8, 2026+2+14
Fri, Oct 9, 2026+2+02
Sat, Oct 10, 2026+2+00
Sun, Oct 11, 2026+0+00
Mon, Oct 12, 2026+2+10
Tue, Oct 13, 2026+1+00
Wed, Oct 14, 2026+1+01
Thu, Oct 15, 2026+1+00
Fri, Oct 16, 2026+2+00
Sat, Oct 17, 2026+3+00
Sun, Oct 18, 2026+0+00
Mon, Oct 19, 2026+0+01
Tue, Oct 20, 2026+2+01
Wed, Oct 21, 2026+10+01
Thu, Oct 22, 2026+8+12
Fri, Oct 23, 2026+4+10
Sat, Oct 24, 2026+4+11
Sun, Oct 25, 2026+0+00
Mon, Oct 26, 2026+3+01
Tue, Oct 27, 2026+0+01
Wed, Oct 28, 2026+3+00
Thu, Oct 29, 2026+1+02
Fri, Oct 30, 2026+2+03
Sat, Oct 31, 2026+0+00
Sun, Nov 1, 2026+2+01
Mon, Nov 2, 2026+1+02
Tue, Nov 3, 2026+4+10
Wed, Nov 4, 2026+2+00
Total+102+1165
  • 1#1 on the list
  • 7Rank that day
  • Not trending
2

    • GitHub trending history

    Where the repository ranked on GitHub Trending, one dot for each day it was on a list

    JavaScript

    Feb 26 – May 14, 2026Best #2

    #1#5#10#15#20#25
    Top 10
    Mar 2026AprMay
    The left and right arrow keys step from day to day; Home and End go to the first and the last

    Mentions and achievements

    Where people are talking about AikidoSec/safe-chain, and every badge it has earned
    1. Jun 71 post

      • IMO, a hardened NPM configuration using `ignore-scripts` and `min-release-age` does not offer real malware protection. This because `ignore-scripts` can be bypassed, proven by "Phantom Gyp", and a…

        Read full on X, posted by @EmilVanGalen

        @EmilVanGalen · x.com

    2. 13 days earlier
    3. May 251 post

      • 🚨Must Have🚨 - disable auto-updates for extensions in VS Code/Cursor + other forks (MacOS: Cmd + Shift + P -> "Disable Auto Updating Extensions") - use static analysis ( for GHA to catch security…

        Read full on X, posted by @vladsazonau

        @vladsazonau · x.com

    4. May 201 post

      • there's a lot of fear going around... the basics still apply and tightening overlooked parts of your attack surface so we built: 1. safe chain (open source package firewall) 2. aikido device…

        Read full on X, posted by @AikidoSecurity

        @AikidoSecurity · x.com

    5. May 191 post

      • 🚨 Shai-Hulud is back. Compromising major packages like Alibaba's @antv suite, echarts-for-react, and timeago.js. Scrapes secrets from CI/CD runners, steals cloud and SSH credentials, plants…

        Read full on X, posted by @AikidoSecurity

        @AikidoSecurity · x.com

    6. May 171 post

      • Your npm install might already be compromised. Aikido Safe Chain intercepts npm, pip, yarn, pnpm, and uv -- scans packages against malware intel before they reach your machine. No API keys, no…

        Read full on X, posted by @so_sthbryan

        @so_sthbryan · x.com

    7. May 121 post

      • Update 5:05 PT: The attack has now expanded well beyond @TanStack and @Mistral. 373 malicious package-version entries across 169 npm package names, including @uipath, @squawk, @tallyui, @beproduct,…

        Read full on X, posted by @AikidoSecurity

        @AikidoSecurity · x.com

    You might also like

    Repositories close to AikidoSec/safe-chain
    FeaturedAdvertise to 180K+ monthly visitors
    Bifrost

    Fastest Enterprise AI Gateway for Routing, Governing, and Securing all your AI Traffic

    DataDog/supply-chain-firewall

    Go

    Supply Chain Firewall (SCFW) is a tool for preventing the installation of malicious npm and PyPI packages 🔥

    40329

    safedep/pmg

    Go

    PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.

    56350

    usestrix/firewall

    Rust

    Strix Supply Chain Firewall

    221

    SocketDev/sfw-free

    Wraps your package manager, preventing installation of malicious packages.

    2678

    DataDog/guarddog

    Python

    🐍 🔎 GuardDog is a CLI tool to Identify malicious PyPI and npm packages

    1.2k131

    arnica/depsguard

    Rust

    Harden your package manager configs against supply chain attacks.

    38322

    elastic/supply-chain-monitor

    Python
    53457

    Cobenian/shai-hulud-detect

    Shell

    A simple project to detect the Shai-Hulud npm supply chain attack

    41083

    projectdiscovery/depx

    Go

    Malicious package & supply-chain intelligence

    20121