Dependency security guard for AI coding agents. Automatically scans npm, pip, pnpm, yarn, and bun packages for known vulnerabilities and malicious code before installation using OSV.dev. Zero config, zero API keys. Blocks malicious packages and warns about CVEs — so your agent never installs compromised dependencies.