Pkgxray – inspect what gets installed, not what executes

Supply-chain security for AI agents, npm packages, and MCP servers. Analyze packages before you install them — zero-dep Node, runs locally, never executes untrusted code. - adamsjack711-ux/pkgxray
6 points by jadamsl 92 days ago github.com 0 comments

Summary

Pkgxray offers a way to analyze packages for AI agents and npm without executing potentially untrusted code. This tool enhances supply-chain security by running locally with zero dependencies, ensuring safer installations.

Comments (0 of ) ⌛

Loading more comments... ⌛
Scroll down to load more comments
No comments available.
Type to search HN and engineering blog articles
Press Escape to close  |  ↑↓ to navigate  |  Enter to open