3 ms·
We’ve built an open-source tool, called Packj [1], to offer developers more insights into packages, such as risky install hooks, embedded binary blobs, and othe
by ashishbijlani 3y ago
We’ve built an open-source tool, called Packj [1], to offer developers more insights into packages, such as risky install hooks, embedded binary blobs, and other malicious/risky packages. It performs static/dynamic/metadata analysis to look for "suspicious” attributes.
1. https://github.com/ossillate-inc/packj https://github.com/ossillate-inc/packj