DepGate

About

DepGate is an open-source dependency gateway that sits between package managers and public registries for npm, PyPI, Maven, Go, NuGet, Cargo, Composer and RubyGems. It checks each requested version against a synced malicious-package feed and the organization's policies, then serves the package or refuses it with an HTTP 403 and a reason. Because the check happens at download time, install scripts of blocked packages never run, and each decision is recorded.