ossillate/packj repository overview

⁠  Packj flags malicious/risky open-source packages

Packj (pronounced package) is an auditing tool to analyze open-source software packages for "risky" attributes that make them vulnerable to supply chain attacks. This is the tool behind our large-scale security analysis platform Packj.dev⁠ that continuously vets packages and provides free reports.