Package-manager wrapper that checks dependencies for malicious code before installation.
Source discussion: Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
“I use safechain for this, because there is always gonna be another package manager configured wrong.”
sunbum · recommendation · first hand use
Direct HN comment