SafeInstall – local install-time guardrails for NPM/pnpm/bun

Show HN: SafeInstall – local install-time guardrails for NPM/pnpm/bun

Operating in show hn launch, SafeInstall – local install-time guardrails for NPM/pnpm/bun operates.

Profile

Hey HN — after the Axios attack I went looking for something that could help against this kind of install-time risk. I didn’t find a tool that did what I wanted, so I built one. SafeInstall is a local CLI for npm, pnpm, and bun. It checks policy before the package manager runs. Especially now, when tons of people are building with AIs like Cursor and Claude and either give them full rights or just hit enter on every prompt, I thought it was important to build a guardrail before the install happens.By default it: blocks very fresh registry releases blocks lifecycle scripts unless explicitly allowed blocks git, tarball, and URL installs by default catches trust downgrades, like registry-to-git

As a business in show hn launch, SafeInstall – local install-time guardrails for NPM/pnpm/bun is listed here with the public details available about it.

Directory data places it at the Show HN launch stage.

Website: www.safeinstall.dev