Any package hosts that scan and include cooldowns by default that operate on a consumption model? The ones I have seen all charge a lot.
Any package hosts that scan and include cooldowns by default that operate on a consumption model? The ones I have seen all charge a lot.
Bytesafe (https://bytesafe.dev). Pure Dependency Firewall, not a package host, with usage based pricing.
Not sure about a service, but PMG enforces dependency cooldown and sandbox on package install. https://github.com/safedep/pmg
This one ? https://news.ycombinator.com/item?id=46909037
I use it, I don't cooldown, proper version pinning for me.
Socket.dev
Tell em Tom Zubiri sent ya (I don't get a commission, just good karma)
man, people are going to be sorely disappointed in what's free on the internet in a couple of years.
Agents and malware will eradicate all goodwill left.
Good by internet.
[flagged]