io.github.Mickdownunder/safeinstalldev-tools

safeinstall

Verified · 12 days ago

Local-first supply-chain security gate for npm/pnpm/bun: typosquat, release age, provenance checks

Install

claude mcp add safeinstall -- npx -y [email protected]

Our take

A local-first security gate for JavaScript package installs that checks for typosquats, stale releases, and provenance signals before `npm`, `pnpm`, or `bun` dependencies are accepted. It is aimed at developers or teams that want lightweight supply-chain checks in everyday workflows. The concept is practical, but the very low star count suggests an early-stage project rather than a broadly proven security tool.

reviewed by hand · 2026-07-12

Something wrong or dead here? Report it

Verification record

last verified
12 days ago
github stars
3
last commit
23 days ago
archived
no
license
MIT
npm
safeinstall-cli
downloads / wk
91
latest version
0.14.0
in registry since
2026-07-11

github.com/Mickdownunder/SafeInstall

More in dev-tools

browse all →
context7dev-tools

Context7

Verified · 34 days ago

Up-to-date code docs for any prompt

hand-reviewed62k starschecked 34 days ago

github-mcp-serverdev-tools

GitHub

Verified · 34 days ago

Connect AI assistants to GitHub - manage repos, issues, PRs, and workflows through natural language.

hand-reviewed33k starschecked 34 days ago

validatordev-tools

Oh My Posh Validator

Verified · 34 days ago

Validate oh-my-posh configurations and segment snippets against the official schema.

hand-reviewed23k starschecked 34 days ago

compiler-explorerdev-tools

Compiler Explorer

Verified · 22 days ago

Compile code with thousands of compilers, inspect the assembly, and share godbolt.org links

hand-reviewed19k starschecked 22 days ago

gitdiagramdev-tools

GitDiagram

Verified · 10 days ago

Architecture diagrams, explanations and Mermaid source for public GitHub repositories.

hand-reviewed18k starschecked 10 days ago