Hacker GitHub

← All repos

safedep/vet

View on GitHub ↗ ★ 1,124 Go

Protect against malicious open source packages 🤖

15 mentions on Hacker News by 3 people: 7 stories, 8 comments · first 2023-11-12 · latest 2025-11-10

Mentions per year 15 mentions · busiest year 2025 (12)
20082026
AllStoriesComments NewestTopOldest
  1. …code capabilities, malicious code and other security sensitive attributes through code analysis. https://github.com/safedep/vet
    comment by abhisek · 2025-11-10 · in Ask HN: What Are You Working On? (Nov 2025)
  2. Someone recommended this to me on another thread and tried it yesterday and it seems very good: https://github.com/safedep/vet
    comment by indigodaddy · 2025-09-22 · in Show HN: Tips to stay safe from NPM supply chain attacks
  3. ▲ 2
    Vet: Open-source software supply chain security tool
    story by indigodaddy · 2025-09-21 · 0 comments
  4. …) - [GitHub - safedep/vet: Protect against malicious open source packages]( https://github.com/safedep/vet ) - [GitHub - AikidoSec/safe-chain]( https://github.com/AikidoSec/safe-chain ) - npm audit
    comment by dflock · 2025-09-17 · in Tinycolor supply chain attack post-mortem
  5. …a try. It detected most of the malicious packages within few hours of publishing to npm. GitHub: https://github.com/safedep/vet
    comment by abhisek · 2025-08-27 · in Malicious versions of Nx and some supporting plugins were published
  6. …to build security guardrails against risky OSS components using opinionated policies. GitHub: https://github.com/safedep/vet
    comment by abhisek · 2025-06-30 · in Ask HN: What Are You Working On? (June 2025)
  7. …we took the open source route. We build our core technology in public as open source project. https://github.com/safedep/vet The commercial SaaS is for scaling and management. Our entire funnel is based on OSS. Folks who have already found…
    comment by abhisek · 2025-05-13 · in Ask HN: How are you acquiring your first hundred users?
  8. May be try out vet as well: https://github.com/safedep/vet vet is backed by a code analysis engine that performs malicious package (npm, pypi etc.) scanning. We recently extended it to support GitHub repository scanning as well. It found…
    comment by abhisek · 2025-04-16 · in Show HN: MCP-Shield – Detect security issues in MCP servers
  9. ▲ 1
    Show HN: Scan GitHub Actions for Malicious Code
    story by abhisek · 2025-03-20 · 0 comments
  10. …on active code analysis of OSS packages (+ transitive dependencies) to look for malicious code: https://github.com/safedep/vet
    comment by abhisek · 2025-03-17 · in Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos
  11. ▲ 1
    Show HN: Vetpkg.dev – open-source Package Security Dashboard
    story by abhisek · 2025-02-19 · 0 comments
  12. ▲ 2
    Show HN: vet – Adding Support for Open Source Package Malware Scanning
    story by abhisek · 2025-01-29 · 0 comments
  13. ▲ 3
    Show HN: Vet – Open-Source Software Supply Chain Security Tool
    story by abhisek · 2024-10-30 · 0 comments
  14. ▲ 6
    Show HN: Vet now supports detecting malicious packages
    story by abhisek · 2023-12-31 · 0 comments
  15. ▲ 7
    Show HN: I built a tool for policy driven vetting of open source packages
    story by abhisek · 2023-11-12 · 0 comments