pmg/docs/proxy-mode.md

Proxy Mode

PMG supports an experimental proxy based interception as an alternative to the current optimistic dependency resolution. When enabled via --experimental-proxy-mode flag:

• PMG starts a micro-proxy server on a random localhost port
• Runs npm and other supported package managers configured to use the proxy
• Intercepts package registry requests and analyzes packages as they are downloaded
• Blocks malicious packages and allows trusted packages to be installed

Usage

pmg --experimental-proxy-mode npm install lodash

Configuration

To permanently enable proxy mode, add the following to your config.yml file:

experimental_proxy_mode: true

Supported Package Managers

Package Manager	Status
npm	✅ Active
npx	✅ Active
pnpm	✅ Active
pnpx	✅ Active
bun	✅ Active
yarn	✅ Active
pip	🕒 Planned
uv	🕒 Planned
poetry	🕒 Planned