Find dependency confusion risks, where a public package can replace an internal package with the same name. Review dependency files, identify exposed names, and guide registry restrictions and recurring CI checks to prevent substitution.
中文简介正在准备中。当前显示英语简介。
- Auditing projects that mix private and public package registries
- Checking exposure after internal package names have leaked
- Restricting package sources to approved private registries
mukul975/Anthropic-Cybersecurity-Skills3.5万2026年8月31日 更新