Results for “package-security”
8 skills
antfu pnpm
Manage Node.js dependencies with pnpm, including workspaces, catalogs, patches, and supply-chain security.
5.5k · bundle
mukul975 detecting-typosquatting-packages
Flag misspelled, brandjacked, and typosquatted package names across npm, PyPI, and crates.io before installation using edit-distance, keyboard-proximity, and known-target corpus matching with typomania, OSSGadget, and pypi-scan.
24.6k · bundle
More results
affaan-m opensource-pipeline
Fork, sanitize, and package private projects for safe public release through a three-stage pipeline.
226k
zhaoxuya520 supply-chain-security
Assess software supply chain security by generating SBOMs, scanning dependencies, auditing CI/CD pipelines, analyzing container images, and verifying vulnerability reachability.
12.8k · bundle
iamanacarolinarezende bash-pro
Write defensive Bash scripts for production automation, CI/CD pipelines, and system utilities with safe, portable, and testable patterns.
0
mukul975 detecting-supply-chain-attacks-in-ci-cd
Scans GitHub Actions workflows and CI/CD pipeline configurations for supply chain attack vectors including unpinned actions, script injection via expressions, dependency confusion, and secrets exposure.
24.6k · bundle
phoroth bash-pro
Write defensive, portable Bash scripts for automation, CI/CD, and system utilities, with strict error handling, safe argument parsing, and testing.
3
mukul975 implementing-code-signing-for-artifacts
Sign build artifacts (binaries, packages, containers) with GPG, Sigstore, and platform-specific tools to ensure integrity and authenticity throughout the software supply chain.
24.6k · bundle