Secure NPM Dependency Scanner
8.5
A real-time, automated scanner that integrates with CI/CD pipelines to detect and prevent malicious code injections within npm install processes, safeguarding against vulnerabilities like the recent poisoned package attacks.
280h
mvp estimate
8.5
viability grade
13
views
technology stack
Rust
NodeJS
Difficult
inspired by
How a preinstall hook silently ran malware on npm install