SafeInstall, open source
An install gate for npm, pnpm and bun that blocks risky package installations before they run – for humans and for AI coding agents. It also protects the files that steer agents, using a hash baseline in the repository and in CI. MIT licence, limitations publicly documented.
Case study SafeInstall
