← Browse
pkgguard
shianjeng ★ 0
pkgguard prevents coding agents from installing hallucinated, typosquatted, malicious, or freshly hijacked npm and PyPI packages by checking package names and metadata before installation. It operates as a Claude Code hook that intercepts package manager commands, queries npm and PyPI registries, and checks OSV advisories for malware or known vulnerabilities.
Install
> /plugin marketplace add shianjeng/pkgguard
> /plugin install pkgguard
What it's made of
1 skill · 1 hook
- Commands
- 0
- Agents
- 0
- Skills
- 1
- MCP servers
- 0
- Hooks
- 1 · PreToolUse
What it needs & plugs into
- API keys
- none
- Paid services
- none detected
- External tools
node- Talks to
- nothing external detected
Analyzed . Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.
Is this your plugin?
Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (shianjeng).