GuardDog: The Open-Source CLI Tool for Hunting Malicious Packages in npm, PyPI, and More
GuardDog is a CLI tool that allows to identify malicious PyPI and npm packages, Go modules, GitHub actions, or VSCode extensions. It runs a set of heuristics on the package source code (through Semgrep...
