See what an install script actually does before you approve it: behavioral analysis, binding.gyp inspection and resolved provenance identity for npm 12 allowScripts, pnpm allowBuilds, yarn and bun

Pre-deploy ship gate for AI-built SaaS. Audits npm 12 install-script trust (allowScripts), MCP agent config, Supabase RLS, Stripe webhooks and leaked keys — offline, from files you already have. No upload, no sign-up.

Offline static-analysis rules behind Assurly: npm 12 install-script trust (allowScripts), MCP agent config auditing, slopsquat detection, Supabase RLS, Stripe webhooks, leaked service keys. Runs in Node or the browser.

Classify npm install/postinstall scripts as safe or suspicious and generate an npm v12 allowScripts config, with an optional PR.

A high-level API to control headless Chrome over the DevTools Protocol

node

A high-level API to control headless Chrome over the DevTools Protocol

Test-only container package that depends on @wojciech_lesicki/security-lifecycle-demo, used to verify its behavior end-to-end as a real dependency (install, lifecycle scripts, allowScripts blocking) rather than as the root project.

Educational demo of npm preinstall/postinstall lifecycle scripts - each hook fetches a package's registry metadata and logs the response, and reports how npm >=12's allowScripts blocking affects it.

Terminal multiplexer & control center for AI coding assistants

A protoc-gen-js binary for npm.

A modern CLI tool for scaffolding end-to-end type-safe TypeScript projects with best practices and customizable configurations

PostgreSQL data source backend implementation for Rebase with Drizzle ORM

ivuorinen's shareable configuration for Browserslist.

Cross-platform solution for using multiple versions of node. Useful for compatibility testing

Memory module - JSON pattern store and a SQLite + embeddings backend with a size-gated HNSW ANN fast path built in

Rust toolchain as npm CLI package — automatically downloads rustup and installs cargo, rustc, rustup, rustfmt and rustdoc for the current platform

ivuorinen's shareable configuration for ESLint.

Hook type definitions, an in-memory HookRegistry/HookExecutor, and a WorkerManager with 8 on-demand background workers (health/ddd/security/cache/map/audit/consolidate/progress). Not the runtime hook dispatcher — the live path is .claude/helpers/ (CJS han

Run exact Pi models as bounded workers for coding agents.