safeinstall
io.github.Mickdownunder/safeinstall
Local-first supply-chain security gate for npm/pnpm/bun: typosquat, release age, provenance checks
Description as published in the official MCP registry.
What we measured
| Endpoint | None listed (runs locally) | registry |
|---|---|---|
| GitHub stars | 3 | github.com/Mickdownunder/SafeInstall |
| Last push | 2026-10-01 | GitHub API |
| Licence | MIT | GitHub API |
| Registry version | 0.12.0 · active · updated 2026-07-11 | registry |
| Package | npm: safeinstall-cli | registry |
Signed reports
No signed reports yet. A report carries a signed decision record from the reporter's gate, so it shows a real call went through, not just an opinion. How to file one.
Connect
npx -y safeinstall-cliCommands are built from the registry entry. Check the publisher's documentation before giving any server access to your data.
Badge for your README
Shows the result of our latest check and links back to this page.
[](https://openforallofus.com/tools/io.github.Mickdownunder/safeinstall)Agents can read this page as data: MCP endpoint https://openforallofus.com/api/mcp, tool get_tool with name io.github.Mickdownunder/safeinstall.