io.github.Mickdownunder/safeinstalldev-tools

safeinstall

Verified · yesterday

Local-first supply-chain security gate for npm/pnpm/bun: typosquat, release age, provenance checks

Install

claude mcp add safeinstall -- npx -y [email protected]

Our take

A local-first security gate for JavaScript package installs that checks for typosquats, stale releases, and provenance signals before `npm`, `pnpm`, or `bun` dependencies are accepted. It is aimed at developers or teams that want lightweight supply-chain checks in everyday workflows. The concept is practical, but the very low star count suggests an early-stage project rather than a broadly proven security tool.

reviewed by hand · 2026-07-12

Something wrong or dead here? Report it

Verification record

last verified
yesterday
github stars
3
last commit
12 days ago
archived
no
license
MIT
npm
safeinstall-cli
downloads / wk
94
latest version
0.14.0
in registry since
2026-07-11

github.com/Mickdownunder/SafeInstall

More in dev-tools

browse all →
context7dev-tools

Context7

Verified · 15 days ago

Up-to-date code docs for any prompt

hand-reviewed61k starschecked 15 days ago

github-mcp-serverdev-tools

GitHub

Verified · 15 days ago

Connect AI assistants to GitHub - manage repos, issues, PRs, and workflows through natural language.

hand-reviewed32k starschecked 15 days ago

validatordev-tools

Oh My Posh Validator

Verified · 15 days ago

Validate oh-my-posh configurations and segment snippets against the official schema.

hand-reviewed23k starschecked 15 days ago

compiler-explorerdev-tools

Compiler Explorer

Verified · 7 days ago

Compile code with thousands of compilers, inspect the assembly, and share godbolt.org links

hand-reviewed19k starschecked 7 days ago

registrydev-tools

MCP Registry Server

Verified · 19 days ago

Publish and discover MCP servers via the official MCP Registry. Powered by HAPI MCP server.

hand-reviewed7.1k starschecked 19 days ago