Announcing GuardDog 1.0, with npm support, new heuristics, and easier CI integration

In November 2022, we released GuardDog, an open source project that helps identify malicious Python packages using Semgrep and package metadata analysis.

Today, we're excited to release a new major version of GuardDog, v1.0, with a number of new features that we describe below. Head over to the GitHub repository, and refer to the release notes if you're an existing user.

For this occasion, GuardDog is also getting a logo!

In this post, we’ll …

analysis features github head identify integration major malicious metadata new features november npm open source package packages project python release release notes repository semgrep support version