@safedep/pmg 0.9.0 → 0.10.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +25 -19
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -1,47 +1,50 @@
|
|
|
1
|
-
|
|
1
|
+
<div align="center">
|
|
2
|
+
<img src="https://raw.githubusercontent.com/safedep/pmg/main/docs/assets/pmg-banner.png" alt="PMG banner">
|
|
3
|
+
</div>
|
|
2
4
|
|
|
5
|
+
# Package Manager Guard (PMG)
|
|
3
6
|
|
|
4
|
-
|
|
7
|
+
PMG intercepts package installs and checks them for malware before code executes. Install it once, and your usual package manager workflows can stay the same.
|
|
5
8
|
|
|
6
|
-
This is the npm distribution of PMG
|
|
9
|
+
This package is the npm distribution of PMG. The main project README at [`github.com/safedep/pmg`](https://github.com/safedep/pmg) is the source of truth for full documentation.
|
|
7
10
|
|
|
8
|
-
##
|
|
11
|
+
## Why PMG?
|
|
9
12
|
|
|
10
|
-
|
|
13
|
+
- Protects developers and AI coding agents from malicious packages
|
|
14
|
+
- Wraps tools like `npm`, `pnpm`, `yarn`, `pip`, `poetry`, and `uv`
|
|
15
|
+
- Adds sandboxing and install-time security checks with minimal workflow changes
|
|
16
|
+
|
|
17
|
+
## Install
|
|
11
18
|
|
|
12
19
|
```bash
|
|
13
20
|
npm install -g @safedep/pmg
|
|
14
21
|
```
|
|
15
22
|
|
|
16
|
-
|
|
23
|
+
You can also install PMG with Homebrew:
|
|
17
24
|
|
|
18
25
|
```bash
|
|
19
|
-
brew tap safedep/tap
|
|
20
26
|
brew install safedep/tap/pmg
|
|
21
27
|
```
|
|
22
28
|
|
|
23
|
-
##
|
|
29
|
+
## Quick Start
|
|
24
30
|
|
|
25
|
-
Set up PMG
|
|
31
|
+
Set up PMG so your normal package manager commands are protected automatically:
|
|
26
32
|
|
|
27
33
|
```bash
|
|
28
|
-
# Recommended: Set up automatic protection
|
|
29
34
|
pmg setup install
|
|
30
35
|
```
|
|
31
36
|
|
|
32
|
-
After setup,
|
|
37
|
+
After setup, restart your terminal and keep using your tools as usual:
|
|
33
38
|
|
|
34
39
|
```bash
|
|
35
|
-
# Your regular commands are now protected
|
|
36
40
|
npm install express
|
|
37
41
|
pnpm add react
|
|
38
42
|
pip install requests
|
|
39
43
|
```
|
|
40
44
|
|
|
41
|
-
|
|
45
|
+
If you prefer, you can also run package manager commands through PMG directly:
|
|
42
46
|
|
|
43
47
|
```bash
|
|
44
|
-
# Manual protection (alternative)
|
|
45
48
|
pmg npm install express
|
|
46
49
|
pmg pnpm add react
|
|
47
50
|
pmg pip install requests
|
|
@@ -49,12 +52,15 @@ pmg pip install requests
|
|
|
49
52
|
|
|
50
53
|
## Platform Support
|
|
51
54
|
|
|
52
|
-
-
|
|
53
|
-
-
|
|
54
|
-
-
|
|
55
|
+
- macOS
|
|
56
|
+
- Linux
|
|
57
|
+
- Windows
|
|
55
58
|
|
|
56
59
|
Requires Node.js 14 or higher.
|
|
57
60
|
|
|
58
|
-
|
|
61
|
+
## Learn More
|
|
62
|
+
|
|
63
|
+
For complete documentation, installation options, troubleshooting, and project updates, see:
|
|
59
64
|
|
|
60
|
-
|
|
65
|
+
- [Main README](https://github.com/safedep/pmg)
|
|
66
|
+
- [Quickstart Docs](https://docs.safedep.io/pmg/quickstart)
|
package/package.json
CHANGED