public evidence dossier

io.github.Mickdownunder/safeinstall

Local-first supply-chain security gate for npm/pnpm/bun: typosquat, release age, provenance checks

Latest visible observation: 2026-08-30T22:30:41.080Z

Run a preflight Open expert evidence

Identity

namespacegithub · observed 2026-07-11T11:42:26.679983Z

registry statusactive · observed 2026-07-11T11:42:26.679983Z

origin systemsgithub, npm, osv, registry · observed 2026-08-30T22:30:41.080Z

Distribution

repositoryhttps://github.com/Mickdownunder/SafeInstall · observed 2026-07-14 23:33:31

npm packagesafeinstall-cli · observed 2026-07-14 23:33:31

PyPI packageUnknown

hosted endpointUnknown

Maintenance and public findings

repository pushed2026-08-11T20:00:18Z · observed 2026-08-11T20:00:18Z

repository archivedNo · observed 2026-07-14 23:33:31

npm deprecatedNo · observed 2026-07-14 23:33:31

OSV package advisory1 on record · observed 2026-07-14 23:33:31

Hosted liveness

last endpoint observationUnknown

reported MCP revisionUnknown

Limits

This dossier reports public evidence. It is not a safety, code, permission, scope, runtime, or penetration-test verdict. Missing evidence remains unknown.