dennisdoomen/packageguard

Dependency scanner to ensure only certain NuGet and NPM packages are used

Stars: 73
Forks: 3
Open beginner issues: 0
Indexed issues: 16
Avg merge: 12h 56m
Merged PRs (30d): 20

Dominant language: C#
License: MIT
Last GitHub push: Sep 5, 2026
Latest indexed: Sep 15, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed

Open All

16 open issues indexed

[Feature]: Baseline and suppression file so existing codebases can adopt PackageGuard incrementally Open

enhancement

dennisdoomen/packageguard#211 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
[Feature]: Allow policies to gate on risk scores and package age Open

enhancement

dennisdoomen/packageguard#212 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
[Feature]: First-party GitHub Action with SARIF violation annotations on pull requests Open

enhancement

dennisdoomen/packageguard#213 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
[Feature]: Machine-readable violation output (JSON, Markdown, SARIF, JUnit) Open

enhancement

dennisdoomen/packageguard#214 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
[Feature]: Pull-request diff mode to analyse only added or upgraded packages Open

enhancement

dennisdoomen/packageguard#215 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
[Feature]: Generate a third-party attribution / NOTICE file with full license texts Open

enhancement

dennisdoomen/packageguard#216 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
[Feature]: Support SPDX license expressions (OR, AND, WITH) instead of plain identifiers Open

enhancement

dennisdoomen/packageguard#217 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
[Feature]: Built-in policy presets that configurations can extend Open

enhancement

dennisdoomen/packageguard#218 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
[Feature]: Add support for Python dependencies (requirements.txt, poetry.lock, uv.lock) Open

enhancement

dennisdoomen/packageguard#219 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
[Feature]: Detect typosquatting and dependency-confusion risks Open

enhancement

dennisdoomen/packageguard#220 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
[Feature]: MSBuild integration that reports violations as build warnings in the IDE Open

enhancement

dennisdoomen/packageguard#221 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
[Feature]: Add a `packageguard init` command that scaffolds a configuration from actual dependencies Open

enhancement

dennisdoomen/packageguard#222 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
[Feature]: Add a `packageguard explain <package>` command showing dependency paths and verdict rationale Open

enhancement

dennisdoomen/packageguard#223 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
[Feature]: Track risk scores over time and show trends in the report Open

enhancement

dennisdoomen/packageguard#224 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
[Feature]: Feed provenance policy asserting which feed a package must come from Open

enhancement

dennisdoomen/packageguard#225 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add instructions on how to configure Sarif publishing on GitHub Open

dennisdoomen/packageguard#244 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026

A short digest of beginner-friendly GitHub issues.