mirror of
https://github.com/safedep/pmg.git
synced 2026-08-03 07:24:09 +02:00
aa5c528a9d
* docs: Update README * docs: Update README * docs: Update README * docs: Update README * docs: Update README * Apply suggestion from @Sahilb315 Co-authored-by: Sahil Bansal <bansalsahil315@gmail.com> Signed-off-by: Abhisek Datta <abhisek.datta@gmail.com> --------- Signed-off-by: Abhisek Datta <abhisek.datta@gmail.com> Co-authored-by: Sahil Bansal <bansalsahil315@gmail.com>
37 lines
1.0 KiB
Markdown
37 lines
1.0 KiB
Markdown
# Proxy Mode
|
|
|
|
PMG supports an experimental proxy based interception as an alternative to the current optimistic dependency resolution. When enabled via `--experimental-proxy-mode` flag:
|
|
|
|
- PMG starts a micro-proxy server on a random localhost port
|
|
- Runs `npm` and other supported package managers configured to use the proxy
|
|
- Intercepts package registry requests and analyzes packages as they are downloaded
|
|
- Blocks malicious packages and allows trusted packages to be installed
|
|
|
|
## Usage
|
|
|
|
```bash
|
|
pmg --experimental-proxy-mode npm install lodash
|
|
```
|
|
|
|
## Configuration
|
|
|
|
To permanently enable proxy mode, add the following to your `config.yml` file:
|
|
|
|
```yaml
|
|
experimental_proxy_mode: true
|
|
```
|
|
|
|
## Supported Package Managers
|
|
|
|
| Package Manager | Status |
|
|
| --------------- | ------ |
|
|
| `npm` | ✅ |
|
|
| `npx` | ✅ |
|
|
| `pnpm` | ✅ |
|
|
| `pnpx` | ✅ |
|
|
| `bun` | ✅ |
|
|
| `yarn` | ✅ |
|
|
| `pip` | 🕒 |
|
|
| `uv` | 🕒 |
|
|
| `poetry` | 🕒 |
|