Control what enters your software supply chain. An open-source proxy and policy engine for npm, PyPI, Maven, Go, NuGet, Cargo, Composer, and RubyGems.
-
Updated
Oct 25, 2026 - TypeScript
Control what enters your software supply chain. An open-source proxy and policy engine for npm, PyPI, Maven, Go, NuGet, Cargo, Composer, and RubyGems.
Control which packages reach your builds. An ecosystem-agnostic, self-hosted proxy, centrally managed for developer teams and CI. Supports npm and PyPI.
A package firewall for npm, PyPI, Go, and Cargo dependency installs: a single-binary, policy-enforcing registry proxy.
Open-core of Chainsaw, a package firewall: refuses malicious, typosquatted and known-vulnerable packages at install time across 16 package ecosystems. The chainsaw CLI plus the proxy, policy and detection engines. Apache-2.0.
To associate your repository with the package-firewall topic, visit your repo's landing page and select "manage topics."