Auto-Unpublish NPM Packages Published Outside CI
Auto-Unpublish NPM Packages Published Outside CI
A lot of vendors and open-source projects shared guidance on protecting users from downloading malicious NPM packages after the Shai-Hulud campaign — but almost nothing focused on protecting maintainers from accidentally (or maliciously) publishing them. So we built a small tool that continuously monitors your NPM packages and automatically unpublishes any version not produced by your CI workflow.
Share cardActual performance
Launch Intel predictions
Analyze your own launch →Correct prediction on native model
Similar products
GoDoc for NPM Packages
NPM Packages-Outdated
npm addict – Your daily injection of npm packages
See what other NPM packages everyone else is using
Bundlephobia – find the cost of installing npm packages
Implit – A CLI that catches AI-hallucinated NPM packages
Publish npm packages with fewer screwups
Audit NPM packages before installing
Paid NPM Packages
Instantly Search for NPM Packages