package-json

Detects npm supply-chain attacks: hidden URL dependencies, typosquatting, and malicious install scripts in package.json / package-lock.json. Zero dependencies, CI/CD ready via GitHub Action.

nodejs python npm security static-analysis package-json typosquatting security-tools devsecops cli-tool vulnerability-scanner malware-detection sast dependency-management github-actions supply-chain-security

Updated Aug 31, 2026
Python

josepablo134 / SimpleSourcePackageManager

Star

Simple Package Manager that installs packages in form of source code that can be access from CMake build system

c package-manager cmake cplusplus cpp package-json package-management

Updated Mar 14, 2023
Python

mralfiem591 / paxd

Star

The main repository of PaxD, a new Python package manager.

python package-manager package packages python-script python3 package-json python-3 package-management package-repository package-registry

Updated Jul 9, 2026
Python

willynilly / same-version

Star

Automatically ensures your software version metadata is consistent across key project files.

cli metadata devops citation versioning open-science package-json developer-tools fair-data codemeta github-actions pre-commit-hook fair-software pyproject-toml zenodo-citation-metadata setup-py codemeta-json software-versioning

Updated Jun 15, 2025
Python

P-R-E-Z / plogr

Star

Cross-platform logger that records every package install/remove and files downloaded to ~/Downloads — supports only DNF currently. APT, Pacman, Homebrew, Chocolatey, Winget are WIP

logger logging package-json package-management packagemanager package-tracking