DataDog

DataDog/guarddog

:snake: :mag: GuardDog is a CLI tool to Identify malicious PyPI and npm packages

1.2K stars 104 forks 1.2K watchers Python Apache License 2.0
malicious-packages npm npm-packages pypi-packages python python-security software-supply-chain-security
View on GitHub Website
3 Open Issues Need Help Last updated: Jul 13, 2026

Open Issues Need Help

View All on GitHub
Support Rust crates 3 days ago
enhancement good first issue
DataDog/guarddog
1.2K

:snake: :mag: GuardDog is a CLI tool to Identify malicious PyPI and npm packages

Python
#malicious-packages#npm#npm-packages#pypi-packages#python#python-security#software-supply-chain-security
Flag npm packages when the latest version doesn't have provenance data while others had 11 days ago
good first issue kind/heuristic
DataDog/guarddog
1.2K

:snake: :mag: GuardDog is a CLI tool to Identify malicious PyPI and npm packages

Python
#malicious-packages#npm#npm-packages#pypi-packages#python#python-security#software-supply-chain-security
Feature Request: Option to Ignore Dev Dependencies for NPM 5 months ago
enhancement good first issue kind/core ecosystem/npm
DataDog/guarddog
1.2K

:snake: :mag: GuardDog is a CLI tool to Identify malicious PyPI and npm packages

Python
#malicious-packages#npm#npm-packages#pypi-packages#python#python-security#software-supply-chain-security