PkgSafe

Check if an open source package contains malware

About PkgSafe

This tool checks packages against OSV.dev to identify malicious packages:

  • OSV.dev - Google's Open Source Vulnerability database that aggregates malware data from OpenSSF and other sources

Note: A clean result doesn't guarantee safety. Always review package code and use packages from trusted maintainers.

Data sourced from osv.dev

Created by Shivam Saraswat