I’m working on https://greenflagged.dev

I originally thought it would be useful to have a package registry that helps prevent supply chain attacks. It reads and judges all of the changes to popular NPM packages. While building I realized that it’s a package manager that agents can settle package versions with as old versions have new vulnerabilities found.

I’ve caught several supply chain attacks since I started monitoring, and am building an automatic response pipeline to validate and publish new attacks.

I’ve also been working on python support and hope to have that released soon.