SafeInstall
Open source · MITA CLI gate that evaluates policy before npm, pnpm or bun run a single install script: release age, lifecycle scripts, non-registry sources, typo-squatting, Sigstore provenance and trust downgrades. Built for developers and AI coding agents – it hooks into Claude Code, Codex and Cursor at shell level and exposes an MCP server so agents can consult the policy before suggesting a package.