PackGuard

Block AI config leaks before npm publish fires

Freelance Developer Tools Artificial Intelligence發布於 2026年5月19日

什麼是 PackGuard？

428 npm packages already contain AI assistant dotfiles. 33 exposed live keys. PackGuard hooks into prepublishOnly, opens your tarball before it ships, and blocksclaude/,cursor/, source maps with embedded source, and high-entropy secrets. Refuses to publish until it's clean. Free for solo OSS.

截圖

還沒有評論，來搶沙發吧！