pkgd
// dependency firewall for node & python

Install packages.
Not surprises.

pkgd sits between your package manager and the registry. New maintainer? Postinstall script? Typosquat? Blocked before it touches disk.

curl -fsSL pkgd.dev/install | sh
pkgd guard npm install left-pad
✓ 214 packages scanned — 1 blocked (postinstall: network call)
Get started free MIT-licensed CLI · paid team policies
38ms
median added latency per install
61k
known-bad releases in the blocklist
0
code leaves your machine — scans run locally
1 line
of CI config to enforce team-wide
// what it catches
install scripts that phone home
maintainer handoffs in the last 30 days
names one keystroke from a top-1000 package
binaries that don't match the published source