Au

Auto-Unpublish NPM Packages Published Outside CI

Hacker News

Auto-Unpublish NPM Packages Published Outside CI

A lot of vendors and open-source projects shared guidance on protecting users from downloading malicious NPM packages after the Shai-Hulud campaign — but almost nothing focused on protecting maintainers from accidentally (or maliciously) publishing them. So we built a small tool that continuously monitors your NPM packages and automatically unpublishes any version not produced by your CI workflow.

Share card

Actual performance

6points
2comments
Did not reach leaderboard

Launch Intel predictions

Analyze your own launch →
Product HuntOn track for Day 1 leaderboard · Strong signals: user, open · Missing: mac, agents, macos
55%55% predicted probability of success on Product Hunt, based on ML models trained on real launch data.
best fitHighest predicted score across all platforms for this description.
Hacker NewsMay not resonate with HN audience · Strong signals: ide, io · Missing: https docs, excited, just released
42%42% predicted probability of success on Hacker News, based on ML models trained on real launch data.
nativeThis product was originally launched on this platform.
Indie HackersIH features products with proven revenue · Missing: supports, reddit linkedin, podcasting
36%36% predicted probability of success on Indie Hackers, based on ML models trained on real launch data.
TrustMRRLess likely to generate early MRR · Strong signals: users · Missing: mobile apps, ios, personal
33%33% predicted probability of success on TrustMRR, based on ML models trained on real launch data.
AppSumoMay struggle as an AppSumo deal · Strong signals: users · Missing: plus, platform, intuitive
28%28% predicted probability of success on AppSumo, based on ML models trained on real launch data.
Acquire.comPre-revenue stage for this audience · Missing: arr, mrr, revenue
16%16% predicted probability of success on Acquire.com, based on ML models trained on real launch data.
BetaListMay not resonate with beta-testers · Missing: web3, chat, crypto
7%7% predicted probability of success on BetaList, based on ML models trained on real launch data.

Correct prediction on native model

Similar products

Go
GoDoc for NPM Packages36%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

GoDoc for NPM Packages

Hacker News1
NP
NPM Packages-Outdated36%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

NPM Packages-Outdated

Hacker News2
np
npm addict – Your daily injection of npm packages26%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

npm addict – Your daily injection of npm packages

Hacker News5
Se
See what other NPM packages everyone else is using35%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

See what other NPM packages everyone else is using

Hacker News67
Bu
Bundlephobia – find the cost of installing npm packages46%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Bundlephobia – find the cost of installing npm packages

Hacker News2
Im
Implit – A CLI that catches AI-hallucinated NPM packages25%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Implit – A CLI that catches AI-hallucinated NPM packages

Hacker News1
Pu
Publish npm packages with fewer screwups56%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Publish npm packages with fewer screwups

Hacker News1
Au
Audit NPM packages before installing41%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Audit NPM packages before installing

Hacker News1
Pa
Paid NPM Packages49%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Paid NPM Packages

Hacker News1
In
Instantly Search for NPM Packages40%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Instantly Search for NPM Packages

Hacker News4