Comment by infecto

8 hours ago

Any package hosts that scan and include cooldowns by default that operate on a consumption model? The ones I have seen all charge a lot.

6 comments

infecto

Bytesafe (https://bytesafe.dev). Pure Dependency Firewall, not a package host, with usage based pricing.

Not sure about a service, but PMG enforces dependency cooldown and sandbox on package install. https://github.com/safedep/pmg

I use it, I don't cooldown, proper version pinning for me.

Socket.dev

Tell em Tom Zubiri sent ya (I don't get a commission, just good karma)

man, people are going to be sorely disappointed in what's free on the internet in a couple of years.

Agents and malware will eradicate all goodwill left.

Good by internet.

[flagged]