TLDR Tech / InfoSec
Introducing Package Proxy: Supply-Chain Safety Checks Without Client-Side Software
In the wake of numerous recent supply chain compromises, Thinkst released Package Proxy as an inline package guard. Package Proxy supports dependency cooldown, upload-mechanism regression checks, a bypass for explicit audit-fix steps, and block/allow lists. Package Proxy deploys on Cloudflare, uses Workers to serve packages, and uses a D1 Database for logging, enabling SQL queries into package installs.
Read the full story