mirror of
https://github.com/safedep/pmg.git
synced 2026-08-03 07:24:09 +02:00
The npm postinstall script used `unzip` to extract .zip archives, but `unzip` is not available by default on Windows, causing installation to fail with a `spawn UNKNOWN` error. Use PowerShell's `Expand-Archive` on Windows instead, which is available since PowerShell 5.0 (Windows 10+). Fixes #187 Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
PMG - Package Manager Guard
🤖 PMG protects developers from getting compromised by malicious open source packages.
This is the npm distribution of PMG, a tool that wraps your favorite package manager (e.g., npm) and blocks malicious packages at install time.
Installation
Install PMG globally via npm:
npm install -g @safedep/pmg
Or using Homebrew:
brew tap safedep/tap
brew install safedep/tap/pmg
Usage
Set up PMG to automatically protect your package installations:
# Recommended: Set up automatic protection
pmg setup install
After setup, use your package managers normally:
# Your regular commands are now protected
npm install express
pnpm add react
pip install requests
Or use PMG manually without setup:
# Manual protection (alternative)
pmg npm install express
pmg pnpm add react
pmg pip install requests
Platform Support
- ✅ macOS (Intel & Apple Silicon)
- ✅ Linux (x86_64, ARM64, i386)
- ✅ Windows (x86_64, ARM64, i386)
Requires Node.js 14 or higher.
For complete documentation, advanced usage, troubleshooting, and more information, please visit: github.com/safedep/pmg