pnpm

DepsGuard is a Rust-based tool that automates configuring security settings (like cooldowns and script restrictions) across NPM, pnpm, yarn, bun, and uv package managers. It addresses the complexity of manually editing multiple config files by providing a single command to apply recommended hardening measures, including min-release-age and ignore-scripts policies.

The safe-install package provides safer NPM installs with trusted build dependencies, allowing users to disable install scripts by default and define a list of allowed dependencies. It also supports blocking exotic sub-dependencies. The package was created in response to ongoing npm supply chain compromises.