As a student who builds projects, I have always found it hard to tell if a package is safe or not. I know I'm not the only one, especially after hearing about recent supply chain attacks on popular packages like axios.
I was looking for solutions. Spent some time searching online and even asked Claude for help. That's when I found SafeDep. They offer free and open source tools to help developers avoid bad packages.
One tool that caught my attention is called Package Manager Guard or PMG in short. It basically watches your back every time you install something and blocks anything sketchy before it can cause harm. The best part is that once you set it up, it just works on its own. No extra effort needed.
If this sounds like something you might find useful, check it out on GitHub. Just search for SafeDep/pmg to go through their codebase. Since it's open source, it's easy to contribute to the project if you want to help. Hope this helps someone out there!<3 #dev #programming #technology source