package-security
Typosquat detector for AI coding agent dependencies
package scanner for Arch Linux based systems
Assess a Python package for supply-chain risk before pip installs it. Pre-install gate for pip with sandbox-backed verdicts, SARIF output and CI exit codes.
Verify PyPI package attestations and improve Python supply-chain security
