PlugMyPlugin
← Browse

jr-pkg-guard

jrlprost ★ 2

jr-pkg-guard validates every package install against its registry before execution, blocking hallucinated or typosquatted package names, flagging newly published packages under 30 days old, and detecting install scripts. It supports npm, PyPI, crates.io, and RubyGems ecosystems by querying their public registries without modifying the file system or running any code.

Security DevOps No API key detected prompt pack

Install

> /plugin marketplace add jrlprost/claude-code-mods/tree/HEAD/plugins/jr-pkg-guard
> /plugin install jr-pkg-guard

Source: https://github.com/jrlprost/claude-code-mods/tree/HEAD/plugins/jr-pkg-guard

What it's made of

no extra components

Commands
0
Agents
0
Skills
0
MCP servers
0
Hooks
0

What it needs & plugs into

API keys
none
Paid services
none detected
External tools
none
Talks to
nothing external detected

Analyzed . Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.

Is this your plugin?

Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (jrlprost).