refuse.dev

Check package installations against vulnerability advisories

Website

Meet refuse.dev

refuse.dev checks software packages before they are installed. Its command-line shim sits in front of common package managers, examining requested versions against vulnerability advisories and blocking those with known issues. The same checks can cover commands typed by a developer, generated by an AI coding agent, or run in a continuous integration workflow.

Teams can use the hosted service or run the server themselves, with support spanning language packages, Dockerfile dependencies, GitHub Actions, and Linux distribution packages. When a version is refused, the tool suggests an alternative version. An online playground and MCP support extend the workflow beyond direct terminal use.

Discussion

Tried it? Share a useful thought or ask a question.

Product details

Website
refuse.dev
Status
Launched
Listed

Explore related topics