8 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Call before an agent runs npm install. Checks one npm package against the registry, OSV advisories, install scripts, typosquat and combosquat names and repository provenance, and flags hallucinated or slopsquatted names....
Score a URL for phishing risk before an agent opens or trusts it. Keyless, deterministic heuristics - typosquat / homoglyph of a known brand, punycode / mixed-script hosts, credentials-in-URL, raw-IP hosts, suspicious TL...
Typosquat finder: generates the most likely typo, transposition, omission, doubled-letter, homoglyph and TLD-swap variants of a domain (up to 40) and checks which ones currently resolve. Brand protection and phishing-dom...
Batch install-safety preflight for a whole dependency list or parsed manifest (up to 100 packages). Returns a verdict per package plus a blocked / caution / safe summary. Supply-chain indicators, not a guarantee.
Phishing/trust verdict for a website domain before an agent transacts with an unfamiliar merchant. Fuses registration age (RDAP), DNS/mail posture (SPF, DMARC, DNSSEC), TLS validity, Certificate Transparency history and...
Pure-compute typosquat and homoglyph check on a hostname: edit-distance to a curated brand list, look-alike character normalization, brand-in-subdomain lures, punycode/IDN, abused free-hosting suffixes and throwaway TLDs...
Install-safety preflight for one dependency BEFORE pip install / npm i. Returns a safe / caution / block verdict fusing existence, OSV malware flags, typosquat distance to a popular package, a known-hallucination corpus,...
Typosquat and quality signals for an npm package before installing it: weekly downloads, latest version, license, deprecation notice, repository link, and computed risk flags (low_downloads, deprecated, no_repository, no...