Hacker GitHub

← All repos

safedep/vet

View on GitHub ↗ ★ 1,124 Go

Protect against malicious open source packages 🤖

15 mentions on Hacker News by 3 people: 7 stories, 8 comments · first 2023-11-12 · latest 2025-11-10

Mentions per year 15 mentions · busiest year 2025 (12)
20082026
AllStoriesComments NewestTopOldest
  1. …code capabilities, malicious code and other security sensitive attributes through code analysis. https://github.com/safedep/vet
    comment by abhisek · 2025-11-10 · in Ask HN: What Are You Working On? (Nov 2025)
  2. Someone recommended this to me on another thread and tried it yesterday and it seems very good: https://github.com/safedep/vet
    comment by indigodaddy · 2025-09-22 · in Show HN: Tips to stay safe from NPM supply chain attacks
  3. …) - [GitHub - safedep/vet: Protect against malicious open source packages]( https://github.com/safedep/vet ) - [GitHub - AikidoSec/safe-chain]( https://github.com/AikidoSec/safe-chain ) - npm audit
    comment by dflock · 2025-09-17 · in Tinycolor supply chain attack post-mortem
  4. …a try. It detected most of the malicious packages within few hours of publishing to npm. GitHub: https://github.com/safedep/vet
    comment by abhisek · 2025-08-27 · in Malicious versions of Nx and some supporting plugins were published
  5. …to build security guardrails against risky OSS components using opinionated policies. GitHub: https://github.com/safedep/vet
    comment by abhisek · 2025-06-30 · in Ask HN: What Are You Working On? (June 2025)
  6. …we took the open source route. We build our core technology in public as open source project. https://github.com/safedep/vet The commercial SaaS is for scaling and management. Our entire funnel is based on OSS. Folks who have already found…
    comment by abhisek · 2025-05-13 · in Ask HN: How are you acquiring your first hundred users?
  7. May be try out vet as well: https://github.com/safedep/vet vet is backed by a code analysis engine that performs malicious package (npm, pypi etc.) scanning. We recently extended it to support GitHub repository scanning as well. It found…
    comment by abhisek · 2025-04-16 · in Show HN: MCP-Shield – Detect security issues in MCP servers
  8. …on active code analysis of OSS packages (+ transitive dependencies) to look for malicious code: https://github.com/safedep/vet
    comment by abhisek · 2025-03-17 · in Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos