Dependency Guardian

What it does

Static supply chain scanner catches npm & PyPI attack patterns CVE databases miss: install scripts, credential theft, child process spawning, network exfil. 100 detectors, sandbox routing for eligible packages, GitHub App + CLI. Free plan.

• 
  Socket for GitHub 1.02022 · ▲91

  Secure your JavaScript supply chain – block malware packages

• TT
  Tips to stay safe from NPM supply chain attacksSep 2025 · github.com · ▲96

  Hi everyone, given the recent increase of attacks on the NPM supply chain, I've put together a list of tips and tricks to help developers stay secure on this specific topic: https://github.com/bodadotsh/npm-security-best-practices I'd love for you to check it out, and contribute your own insights and best practices to make this a comprehensive resource for the community. Cheers!

• NI
  npm install actual-malware2022 · github.com · ▲55

  Our package registry ecosystem has a serious problem... and not just npm. People are aware of this but maybe this will make them a bit more aware

• 
  Socket2022 · ▲211

  Secure your JavaScript supply chain

• 
  Arnica2022 · ▲97

  Behavior based software supply chain security

• SI
  Safe-install – safer NPM installs with trusted build dependenciesMay 2026 · npmjs.com · ▲19

  In light of the ongoing npm supply chain compromises, I built safe-install: https://www.npmjs.com/package/@gkiely/safe-install It brings a couple of protections I wanted from npm but are not built in. Similar to Bun’s trusted dependencies, it lets you disable install scripts by default and define a list of dependencies that are allowed to run build/install scripts: https://bun.com/docs/guides/install/trusted It also supports blocking exotic sub-dependencies, similar to pnpm’s `blockExoticSubdeps` setting:…

• TL
  The load-bearing vocabulary of Claude▲703

  Life & fun · 10d ago · louisabraham.github.io

• 
  Articos▲385

  Launch with confidence, not gut instinct

  Life & fun · 12d ago · articos.com

• 
  Nex▲351

  Claude Cowork for high-volume GTM workflows

  Life & fun · 4d ago · nex.ai

• 
  iPhone app takes simultaneous images from 2 lenses, fuses into 1 photo▲329

  Photosynthesis fires two of your iPhone

  Life & fun · 29d ago · photosynthesis.camera

• CC
  Creatium Coach▲320

  Your multimedia mentor that takes you from mid to great

  Life & fun · 11d ago · producthunt.creatium.info

• 
  SoloUno▲310

  Take control of hair pulling, nail biting & skin picking

  Life & fun · 29d ago · solouno.io

• 
  Fundraisly▲1,544

  AI fundraising agent that finds investors and books meetings

  AI · Jun 2026 · fundraisly.com

• H6
  Homebrew 6.0.0▲1,481

  Today, I’m proud to announce Homebrew 6.0.0. The most significant changes since 5.1.0 are a new tap trust security mechanism, the new faster, smaller, default internal Homebrew JSON API, sandboxing on Linux, better defaults informed by our user survey, many brew bundle improvements, improved performance and initial support for macOS 27 (Golden Gate). Happy to discuss any questions here!

  Dev tools · Jun 2026 · brew.sh

• PU
  Performative-UI – A react component library of design tropes▲1,181

  hope you enjoy

  Life & fun · Jun 2026 · vorpus.github.io

• 
  Upstream▲977

  The inbox designed for humans and agents

  AI · Jun 2026 · upstream.do

• 
  Goldfish▲962

  Press Option. It knows your work and replies like you

  AI · Jun 2026 · goldfish.sh

• IM
  I made Google Trends for Hacker News by indexing 18 years of comments▲822

  Life & fun · Jun 2026 · hackernewstrends.com