greenflagged.dev
A package registry and package manager that monitors changes to popular NPM packages to help prevent supply chain attacks, automatically reading and judging package updates. It lets AI agents settle package versions as older versions get new vulnerabilities discovered, has caught several supply chain attacks since monitoring began, and an automatic response pipeline to validate and publish newly detected attacks is in development. Python support is being worked on.
What it addresses
Supply chain attacks and newly discovered vulnerabilities in published package versions.
Shared over time
Each entry reflects what was shared on that date. Details may have changed since then.
greenflagged.dev
A package registry and package manager that monitors changes to popular NPM packages to help prevent supply chain attacks, automatically reading and judging package updates. It lets AI agents settle package versions as older versions get new vulnerabilities discovered, has caught several supply chain attacks since monitoring began, and an automatic response pipeline to validate and publish newly detected attacks is in development. Python support is being worked on.
Problem: Supply chain attacks and newly discovered vulnerabilities in published package versions.
Posted by @Azkar · Original comment ↗
“I originally thought it would be useful to have a package registry that helps prevent supply chain attacks. It reads and judges all of the changes to popular NPM packages. While building I realized that it’s a package manager that agents can settle package versions with as old versions have new vulnerabilities found. I’ve caught several supply chain attacks since I started monitoring, and am building an automatic response pipeline to validate and publish new attacks. I’ve also been working on python support and hope to have that released soon.”