chrystyan96/ExecFence

Supply Chain Firewall (SCFW) is a tool for preventing the installation of malicious npm and PyPI packages 🔥

Harden your package manager configs against supply chain attacks.

tools for sandboxing your dependency graph

Protect against malicious code installed via npm, yarn, pnpm, npx, pnpx, pip, uv and poetry with Aikido Safe Chain. Free to use, no tokens required.

PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.

Command-line interface for socket.dev security analysis

Protect against malicious open source packages 🤖

Audit NPM, Yarn, PNPM, and Bun dependencies in continuous integration environments, preventing integration if vulnerabilities are found at or above a configurable threshold while ignoring allowlisted advisories

A simple project to detect the Shai-Hulud npm supply chain attack