4 ms·
Anthropic/OpenAI could own this space. They should offer a paid service that offers a mirror with LLM scanned and sandbox-evaluated package with their next gen
by carlsborg 6mo ago
Anthropic/OpenAI could own this space. They should offer a paid service that offers a mirror with LLM scanned and sandbox-evaluated package with their next gen models. Free for individuals, orgs can subscribe to it.
- oblvious-earth 6mo agoOpenAI just acquired Astral who have an index service called pyx, so they would have a step up. My understanding though is most corporations that take security seriously either build everything themselves in a sandbox, or use something like JFrog's Artifactory with various security checks, and don't let users directly connect to public indexes. So I'm not sure what the market is.
- doc_ick 6mo agoThere’s also virustotal, any.run, probably a few others outside of GitHub/gitlab scans
- andrepd 6mo agoGenuinely cannot tell whether this is satire.
- firesteelrain 6mo agoOwn what space ?
- johndough 6mo agoJudging by curl shutting down its bug bounty program due to AI slop, a likely outcome would be that this mirror has no packages because they are all blocked by false positives.
- dmitrygr 6mo agoDetecting properly-written malicious code is undecidable. No amount of snake oil fixes that