ossillate-inc/packj
Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain
6 best points · 3 comments · 6 Hacker News posts · 694 GitHub stars · View on GitHub
Hacker News discussions
- Packj sandbox for “safe installation” of PyPI/NPM/Rubygems packages (6 points, 0 comments, by ashishbijlani, 2022-09-01)
- Show HN: Analyze the behavior of OSS for malicious intent (6 points, 1 comments, by justinko, 2022-11-25)
- Packj flags malicious/risky open-source packages (4 points, 1 comments, by mooreds, 2023-02-14)
- Tell HN: Packj flags malicious/risky open-source packages (3 points, 0 comments, by my2c, 2026-05-22)
- Open Source tool to detect software supply chain attacks (3 points, 0 comments, by daveP17, 2026-08-31)
- Open source solution for supply chain attacks (2 points, 1 comments, by dave17, 2026-08-24)