pkg-gate
hemanth
Pre-install security gate for npm lifecycle scripts using TypeSafe System One. Evaluates preinstall, install, and postinstall hooks across intent, threat severity, secret access, and remote execution to intercept supply-chain attacks before execution.
- License
- MIT
- GitHub Stars
- 0
- Source reviewed
- —
Where Jev makes a decision
pkg-gate uses `@typesafe-ai/sdk` to evaluate lifecycle scripts in parallel across intent (Choice), threat severity (Score), secret exfiltration (Noul), and remote execution (Noul).
What this project offers
Adds structured choices or scores to the workflow; performance and cost benefits have not been independently verified.
Review scope
Author and repository text is preserved where clear; missing languages are enriched automatically. Checks establish source-level Jev integration, not runtime, safety, or performance validation.
Sources and implementation
- hemanth/pkg-gate/blob/7649d07768b3682c1d9d9ef94f0b6232c1e2f8d8/README.md
- hemanth/pkg-gate/blob/7649d07768b3682c1d9d9ef94f0b6232c1e2f8d8/src/gate.js
- hemanth/pkg-gate/blob/7649d07768b3682c1d9d9ef94f0b6232c1e2f8d8/src/index.d.ts
- hemanth/pkg-gate/blob/7649d07768b3682c1d9d9ef94f0b6232c1e2f8d8/src/index.js
- hemanth/pkg-gate/blob/7649d07768b3682c1d9d9ef94f0b6232c1e2f8d8/src/questions.js
- hemanth/pkg-gate/blob/7649d07768b3682c1d9d9ef94f0b6232c1e2f8d8/src/resolver.js
- hemanth/pkg-gate/blob/7649d07768b3682c1d9d9ef94f0b6232c1e2f8d8/src/simulator.js
- hemanth/pkg-gate/blob/7649d07768b3682c1d9d9ef94f0b6232c1e2f8d8/src/tui.js
- hemanth/pkg-gate/blob/7649d07768b3682c1d9d9ef94f0b6232c1e2f8d8/src/utils.js
Related projects
safer-with-jev
andrelandgraf · Security & Guardrails
An HTTP inspection gateway that checks request content with Jev before optionally forwarding it to an HTTPS destination.
pi-jev
y0usaf · Security & Guardrails
A Pi extension that flags tool risks before execution and checks output for secrets and failure types.
pi-jev-auto-mode
jomatsu · Security & Guardrails
Adds rule checks to Pi commands and file operations, then uses Jev to assess cases that need further judgment.
jev-judgment
HyunjunJeon · Security & Guardrails
Adds judgment checks for authorization, operation risk, and failure causes to coding Agents.