← Browse
package-bouncer
ychampion ★ 2
package-bouncer intercepts every package install Claude runs across ten package managers (npm, bun, pnpm, yarn, pip, uv, cargo, go, gem, composer) and validates against public registries and the OSV advisory database to block suspicious packages. It stops made-up names, newly published packages, typosquatting attempts, and versions with known security vulnerabilities.
Install
> /plugin marketplace add ychampion/ystack/tree/HEAD/claude/mods/package-bouncer
> /plugin install package-bouncer
Source: https://github.com/ychampion/ystack/tree/HEAD/claude/mods/package-bouncer
What it's made of
no extra components
- Commands
- 0
- Agents
- 0
- Skills
- 0
- MCP servers
- 0
- Hooks
- 0
What it needs & plugs into
- API keys
- none
- Paid services
- none detected
- External tools
- none
- Talks to
- nothing external detected
Analyzed . Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.
Is this your plugin?
Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (ychampion).