Welcome to pwned-deps Discussions!

[mkbhardwas12]

Hey folks,

Thanks for checking out pwned-deps! I built this because I got tired of wondering if my lockfiles were quietly pulling in compromised packages after all the recent supply-chain messes (XZ, Shai-Hulud, etc.). So now you can just run pwned-deps check . and get a fast red/green answer without any fuss.This Discussions section is brand new, so feel free to treat it like our living room. Drop whatever you want:Questions about how to use it in CI, pre-commit, or just locally
Ideas for new lockfile formats or ecosystems we should support
“Hey it flagged something weird on my repo…” (happy to dig in)
Feature requests, complaints, or even just “this saved me today” stories

I read every post, and I’m usually pretty quick to reply.Also, if you haven’t tried the live simulator yet, go mess around with it — it’s kinda fun to watch it catch real malicious examples.Looking forward to hearing from you. Let’s keep our dependencies from getting pwned together