GoKawiildepsguard
_ _ __| | ___ _ __ ___ __ _ _ _ __ _ _ __ __| | / _` |/ _ \ '_ \/ __|/ _` | | | |/ _` | '__/ _` | | (_| | __/ |_) \__ \ (_| | |_| | (_| | | | (_| | \__,_|\___| .__/|___/\__, |\__,_|\__,_|_| \__,_| |_| |___/
Guard your dependencies against supply chain attacks. Single static binary, zero Rust crate dependencies.
By [arnica]
Table of contents
Overview
DepsGuard looks for npm, pnpm, yarn, bun, and uv on your machine, reads their config files, compares them to recommended supply-chain settings, and can apply fixes interactively. It also scans for Renovate and Dependabot configs in your repos. It never runs package installs; it only edits config files you approve, and it writes backups before any change.
Key features
Interactive TUI: scan, review, toggle fixes, apply
scan subcommand for read-only reporting
... continue reading