Files
pmg/publish/npm
be4b751091 fix: Use PowerShell Expand-Archive for zip extraction on Windows (#190)
The npm postinstall script used `unzip` to extract .zip archives, but
`unzip` is not available by default on Windows, causing installation to
fail with a `spawn UNKNOWN` error. Use PowerShell's `Expand-Archive`
on Windows instead, which is available since PowerShell 5.0 (Windows 10+).

Fixes #187

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-31 15:05:37 +05:30
..
2025-07-04 12:42:37 +05:30
2025-07-04 12:42:37 +05:30
2025-07-04 12:42:37 +05:30
2025-07-04 12:42:37 +05:30
2025-07-04 12:42:37 +05:30

PMG - Package Manager Guard

🤖 PMG protects developers from getting compromised by malicious open source packages.

This is the npm distribution of PMG, a tool that wraps your favorite package manager (e.g., npm) and blocks malicious packages at install time.

Installation

Install PMG globally via npm:

npm install -g @safedep/pmg

Or using Homebrew:

brew tap safedep/tap
brew install safedep/tap/pmg

Usage

Set up PMG to automatically protect your package installations:

# Recommended: Set up automatic protection
pmg setup install

After setup, use your package managers normally:

# Your regular commands are now protected
npm install express
pnpm add react
pip install requests

Or use PMG manually without setup:

# Manual protection (alternative)
pmg npm install express
pmg pnpm add react
pmg pip install requests

Platform Support

  • macOS (Intel & Apple Silicon)
  • Linux (x86_64, ARM64, i386)
  • Windows (x86_64, ARM64, i386)

Requires Node.js 14 or higher.


For complete documentation, advanced usage, troubleshooting, and more information, please visit: github.com/safedep/pmg