safedep

safedep/pmg

PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.

472 stars 35 forks 472 watchers Go Apache License 2.0
developer-tools devsecops hacktoberfest malicious-code npm open-source pnpm supply-chain-security
View on GitHub Website
11 Open Issues Need Help Last updated: Jul 29, 2026

Open Issues Need Help

View All on GitHub
Support Unix domain socket bind in sandbox policy 7 days ago
good first issue need-analysis sandbox
safedep/pmg
472

PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.

Go
#developer-tools#devsecops#hacktoberfest#malicious-code#npm#open-source#pnpm#supply-chain-security
Add Support for Sandbox Diagnostics for Landlock about 2 months ago
good first issue need-analysis sandbox
safedep/pmg
472

PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.

Go
#developer-tools#devsecops#hacktoberfest#malicious-code#npm#open-source#pnpm#supply-chain-security
Add Support for Sandbox Diagnostics for Bubblewrap about 2 months ago
good first issue need-analysis sandbox
safedep/pmg
472

PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.

Go
#developer-tools#devsecops#hacktoberfest#malicious-code#npm#open-source#pnpm#supply-chain-security
Add support for `uvx` about 2 months ago
good first issue package-manager-support need-analysis
safedep/pmg
472

PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.

Go
#developer-tools#devsecops#hacktoberfest#malicious-code#npm#open-source#pnpm#supply-chain-security
Add Windows support for building via Makefile 3 months ago
good first issue hacktoberfest
safedep/pmg
472

PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.

Go
#developer-tools#devsecops#hacktoberfest#malicious-code#npm#open-source#pnpm#supply-chain-security
Support for Powershell aliases 4 months ago
good first issue hacktoberfest
safedep/pmg
472

PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.

Go
#developer-tools#devsecops#hacktoberfest#malicious-code#npm#open-source#pnpm#supply-chain-security
Add Sandbox Information in Setup Info 6 months ago
good first issue
safedep/pmg
472

PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.

Go
#developer-tools#devsecops#hacktoberfest#malicious-code#npm#open-source#pnpm#supply-chain-security
Build a security provider for `bun` 7 months ago
enhancement good first issue hacktoberfest
safedep/pmg
472

PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.

Go
#developer-tools#devsecops#hacktoberfest#malicious-code#npm#open-source#pnpm#supply-chain-security
Add Event Log for Trusted Packages 7 months ago
enhancement good first issue
safedep/pmg
472

PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.

Go
#developer-tools#devsecops#hacktoberfest#malicious-code#npm#open-source#pnpm#supply-chain-security
Add support for `update` commands 7 months ago
enhancement good first issue
safedep/pmg
472

PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.

Go
#developer-tools#devsecops#hacktoberfest#malicious-code#npm#open-source#pnpm#supply-chain-security
Add Support for yarn Package Manager 9 months ago
good first issue package-manager-support hacktoberfest
safedep/pmg
472

PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.

Go
#developer-tools#devsecops#hacktoberfest#malicious-code#npm#open-source#pnpm#supply-chain-security