SafeInstall

Name: SafeInstall
Author: Mickdownunder

Local-first supply-chain security gate for npm, pnpm, and bun — checks typosquats, release age, and Sigstore provenance before an agent installs

securitysupply-chainnpmpackage-managementcommunity

Installation

npm install -g safeinstall-cli

{
  "mcpServers": {
    "safeinstall": {
      "command": "npx",
      "args": ["safeinstall-cli", "mcp"]
    }
  }
}