PackGuard
Block AI config leaks before npm publish fires
什么是 PackGuard?
428 npm packages already contain AI assistant dotfiles. 33 exposed live keys. PackGuard hooks into prepublishOnly, opens your tarball before it ships, and blocksclaude/,cursor/, source maps with embedded source, and high-entropy secrets. Refuses to publish until it's clean. Free for solo OSS.
截图
?
还没有评论,来抢沙发吧!
X 上关于 PackGuard 的真实讨论
去 X 发帖


