- 发布日期 · UTC
- 2026-10-19
- 产品域名
- —
- 域名后缀
- —
- 产品方向
- 开发者工具
关于产品
Blocks malicious packages, typosquatting and vulnerable dependencies before they reach your machine or production. Scans npm, PyPI, Go, Docker and GitHub Actions in seconds, 100% local, no account, no telemetry. Free and open source (MIT). Runs in CI and comments on pull requests. Includes a preventive guard: `depsentinel guard npm install` generates the lockfile with --ignore-scripts, scans it, and only then installs.
关键词
dependency scanning开源software supply chain security