safedep/pmg
PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.
6 best points · 2 comments · 3 Hacker News posts · 563 GitHub stars · View on GitHub
Hacker News discussions
- PMG: Wraps Package Managers to Prevent Installation of Malicious OSS Packages (6 points, 0 comments, by abhisek, 2025-05-15)
- Show HN: PMG, open source package firewall (4 points, 2 comments, by abhisek, 2026-07-21)
- Show HN: NPM install is a security hole, so we built a guard for it (1 points, 0 comments, by Sahil121, 2026-03-26)