elementsinteractive/twyn

🐍 🔎 GuardDog is a CLI tool to Identify malicious PyPI and npm packages

deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, GitHub Actions, and more. It runs locally as a CLI and as an MCP server, comes with a skill, and a hook.

Malicious package & supply-chain intelligence

Model Context Protocol server for socket.dev integration

A simple project to detect the Shai-Hulud npm supply chain attack

Is your lockfile pwned? 5-second scan of npm/PyPI/Maven/Cargo/Go/RubyGems lockfiles for compromised packages — OSV + curated campaign feed, --min-age cooling-off gate, exit 4 when a scan is incomplete. SLSA L3, Sigstore-signed feed.

Command-line interface for socket.dev security analysis

Verify PyPI package attestations and improve Python supply-chain security

ꙮ Review dependencies changes to prevent supply chain attack