Description
Supply chain attacks are rising, and one npm install can drop malware on a dev machine or CI. Aikido Safe Chain blocks malicious packages at install time, protecting developer laptops and CI/CD.
It supports npm, yarn, pnpm, npx, pip, uv and poetry, blocks packages newer than 48 hours without breaking builds, and is free and tokenless with no build data shared.
Malware blocking:Checked at install.
New-package delay:Blocks packages under 48 hours old.
Tools:npm, pnpm, pip, uv, poetry and more.
Free:No tokens or data sharing.
It supports npm, yarn, pnpm, npx, pip, uv and poetry, blocks packages newer than 48 hours without breaking builds, and is free and tokenless with no build data shared.
Features
Malware blocking:Checked at install.
New-package delay:Blocks packages under 48 hours old.
Tools:npm, pnpm, pip, uv, poetry and more.
Free:No tokens or data sharing.
