Packj - Large-Scale Security Analysis Platform To Detect Malicious/Risky Open-Source Packages

Packj (pronounced package) is a command line (CLI) tool to vet open-source software packages for "risky" attributes that make them vulnerable to supply chain attacks. This is the tool behind our large-scale security analysis platform Packj.dev that continuously vets packages and provides free reports.

Packj accepts two input args:

• name of the registry or package manager, pypi, npm, or rubygems.
• name of the package to be vetted

Packj supports vetting of PyPI, NPM, and RubyGems packages. It …

analysis large malicious packj platform scale security security analysis security audit security tools vulnerability