DepSentinel

About this product

Blocks malicious packages, typosquatting and vulnerable dependencies before they reach your machine or production. Scans npm, PyPI, Go, Docker and GitHub Actions in seconds, 100% local, no account, no telemetry. Free and open source (MIT). Runs in CI and comments on pull requests. Includes a preventive guard: `depsentinel guard npm install` generates the lockfile with --ignore-scripts, scans it, and only then installs.

Keywords