AikidoSec

    AikidoSec/safe-chain

    Protect against malicious code installed via npm, yarn, pnpm, npx, pnpx, pip, uv and poetry with Aikido Safe Chain. Free to use, no tokens required.

    web
    JavaScript
    NOASSERTION
    1.8K stars
    119 forks
    1.8K GitHub watchers
    Updated Oct 27, 2026
    View on GitHub

    Build with Backblaze B2

    SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.

    Explore Backblaze Labs

    Loading star history...

    Where it stands

    Rank, growth pace and release cadence relative to everything GStars tracks.

    5 releases in the last 90 days, the latest 5 days ago, with 26 contributors on GitHub.

    The biggest single-day gain in the last year, +33 stars on Apr 3, coincided with release 1.4.7.

    Use Cases & Benefits

    • Protects developer environments by blocking malicious packages during installation from npm, yarn, pnpm, npx, pip, and other package managers.
    • Provides real-time malware detection without requiring tokens or sharing build data, ensuring privacy and seamless security integration.
    • Use for securing local developer machines against supply chain attacks when installing JavaScript or Python packages.
    • Use for integrating malware protection into CI/CD pipelines to prevent malicious dependencies from entering automated builds.
    • Use for enforcing a minimum package age policy on npm packages to avoid installing newly published, potentially unsafe packages.

    Should you depend on it?

    License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.

    License

    Other

    GitHub could not identify this license; read the LICENSE file before depending on it.

    Community files

    • README: present
    • Contributing guide: present

    Watch-outs

    • License not identified by GitHub; read the LICENSE file before depending on it.

    General guidance from repository metadata, not legal advice. How we score

    From the README

    Installing the Aikido Safe Chain is easy with our one-line installer.

    ⚠️ Already installed via npm? See the migration guide to switch to the binary version.

    Default installation (JavaScript packages only):

    Excerpt from the AikidoSec/safe-chain README on GitHub (NOASSERTION license). © its authors.Read the full README on GitHub

    Daily snapshots

    Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots

    Forks

    119+15

    Open issues

    144+43

    Compared with peers in Web

    Fastest-growing repositories GStars tracks in this cohort for the week of Nov 1, by 7-day star growth

    AikidoSec/safe-chain compared with Web repositories by stars, 7-day star growth, health score and last release
    RepositoryStars+7dHealthLast release
    pingdotgg/t3code48.4K+16.6K40today
    pbakaus/impeccable104.0K+8.7K5410 days ago
    HunYiSage/dsh-purge19.2K+6.2K13today
    Renhuai123/ziwei-doushu16.2K+6.1K4421 days ago
    paperclipai/paperclip111.5K+2.8K5913 days ago
    AikidoSec/safe-chain1.8K—555 days ago
    Category median48.4K+6.2K44—

    Discover Repositories

    Search across tracked repositories by name or description