SafeInstall – local install-time guardrails for NPM/pnpm/bun
Blocks risky npm installs before they run, unlike npm audit.

Another monorepo orchestrator when Turborepo and Nx already dominate.
Developers managing monorepos with multiple workspaces
Turborepo · Nx · Lerna
I have re-developed this package into pacwich, which supports Bun, npm, or pnpm. I decided it would be a better direction for it to be decoupled from a particular package manager, so it needed a new name (but I wanted to keep my logo).
I write about the development strategy and my engineering philosophy (including disclosing the manner in which AI assists and my approach to not vibing this) in the Security page and the launch blog post about the pivot, which I linked on the home page in the note about the bun-workspaces migration.
More is to come, including a way to compose scripts into more complex workflows rather than running one named script in parallel/series.
Blocks risky npm installs before they run, unlike npm audit.
One command hardens five package managers when hand-editing configs gets ignored.
Rust-based Nx alternative claiming zero dependencies, but entering a brutally crowded market.
Wraps node, npm, and bun under sandbox without code changes, but Deno already does capability security.
Daemonizes foreground tasks (npm run dev) across repos, but solves a localized workflow problem.
Scans Cursor/Cline/GitHub Actions for prompt injection and supply chain attacks—aidevshield catches real exploits.