DepSentinel
Block malicious dependencies before they reach your machine
Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.
Read the full description
Blocks malicious packages, typosquatting and vulnerable dependencies before they reach your machine or production. Scans npm, PyPI, Go, Docker and GitHub Actions in seconds, 100% local, no account, no telemetry. Free and open source (MIT). Runs in CI and comments on pull requests. Includes a preventive guard: `depsentinel guard npm install` generates the lockfile with --ignore-scripts, scans it, and only then installs.
Visit website ↗ Source listing ↗
PH · launched Oct 19, 2026 · 3 upvotes (top 10%)
- Security
- Dev tools
- Developer
- Not AI
- Commercial product
- Open Source
- Developer Tools
- GitHub
- Security
Similar launches
See all 111 similar launches →Could you build this?
Partial The CLI and CI runner wrapper are simple to build, but detecting typosquatting and malicious packages accurately requires continuous curated threat intelligence feeds and package analysis heuristics.
What it would actually take: Requires a continuous ingestion pipeline that monitors PyPI, npm, and crates.io feeds, extracting ASTs and computing Levenshtein distances against known popular packages to detect typosquatting. The scanning engine needs up-to-date threat feeds (OSV, GitHub Security Advisory Database) and static analysis rules to flag suspicious installation scripts or network calls locally.
Competitors
Other products that read as similar to this one : 111 launches clear the similarity bar, closest 8 shown.
Attention rank: #15 of 112 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).
Launched 332 days after the earliest competitor.
- DepsGuard · hn · 2026-06-01 · 40 upvotes · similarity 0.53
- Safe-install · hn · 2026-05-12 · 19 upvotes · similarity 0.50
- CapLock · ph · 2026-09-28 · 1 upvotes · similarity 0.46
- CLI that helps AI agents avoid vulnerable dependencies · hn · 2026-07-01 · 26 upvotes · similarity 0.44
- A context-aware permission guard for Claude Code · hn · 2026-03-11 · 127 upvotes · similarity 0.42
- Safe-NPM · hn · 2025-11-23 · 90 upvotes · similarity 0.42
- mtproto-inataller · github · 2026-09-12 · 7 upvotes · similarity 0.42
- Pqurp · hn · 2026-05-13 · 5 upvotes · similarity 0.41