⌁ Security & Guardrails MIT E2 · source reviewed
Pre-install security gate for npm lifecycle scripts using TypeSafe System One. Evaluates preinstall, install, and postinstall hooks across intent, threat severity, secret access, and remote execution to intercept supply-chain attacks before execution.
ϟ JEV · Decision point pkg-gate uses `@typesafe-ai/sdk` to evaluate lifecycle scripts in parallel across intent (Choice), threat severity (Score), secret exfiltration (Noul), and remote execution (Noul).
→Adds structured choices or scores to the workflow; performance and cost benefits have not been independently verified.
security-guardrailscli-git-gatestyped-decisions
Pre-install security gate for npm lifecycle scripts using TypeSafe System One. Evaluates preinstall, install, and postinstall hooks across intent, threat severity, secret access, and remote execution to intercept supply-chain attacks before execution.
Read project analysis →
ϟ JEV · Decision pointpkg-gate uses `@typesafe-ai/sdk` to evaluate lifecycle scripts in parallel across intent (Choice), threat severity (Score), secret exfiltration (Noul), and remote execution (Noul).
→Adds structured choices or scores to the workflow; performance and cost benefits have not been independently verified.
- Stars / Forks
- 0 / 0
- Issues
- 0
- License
- MIT
- Last commit
- 2026-09-21
Source note Pinned lifecycle policy and simulator reviewed. Missing keys or provider failures can produce simulated answers; the final report keeps an offline-simulator model marker but drops the intermediate fallbackReason. The site did not install packages, test threat detection or run live Jev.