automation

safe-chain: Protect Code

Name: safe-chain: Protect Code
Author: AikidoSec

Prevent malicious code installs with safe-chain, for founders using npm, yarn and more, backed by 1.6k+ GitHub stars

1,583 stars98 forksJavaScriptQuality 9/10Updated 6/29/2026100% free · open source

What it does

Safe-chain prevents malicious code installs by verifying the integrity of packages installed via npm, yarn, pnpm, npx, pnpx, pip, uv, and poetry

Install / run

npx @aikidosec/safe-chain init

When to use it

•When using npm or yarn to install dependencies for your project
•When running scripts with npx or pnpx that may install unknown code
•When managing dependencies with pip, uv, or poetry and want to ensure safety

Quick start

1Run 'npx @aikidosec/safe-chain init' to initialize safe-chain in your project
2Configure your package manager to use safe-chain by adding the '--safe-chain' flag to your install commands
3Verify the integrity of your installed packages with 'npx @aikidosec/safe-chain verify'
4Integrate safe-chain into your CI/CD pipeline to automate security checks
5Refer to the GitHub repository for advanced configuration options and troubleshooting guides

Ready-to-paste prompt

npx @aikidosec/safe-chain verify --package-manager npm --lock-file package-lock.json

Heads up: Make sure you have the necessary permissions and access rights to execute the safe-chain commands, as some features may require elevated privileges or specific environment variables to be set

Saves to your device

What's inside — free to inspect

No purchase needed

Read the entire source before you build — unlike paid marketplaces that hide it behind a buy button.

top-level files

folders

2.4M

repo size

Other

license

Key files

.editorconfig