DepSentry
🚀 v0.1.0 is now live: Hybrid Analysis Engine

The Firewall for
Your Dependencies

Stop supply chain attacks before they start. DepSentry is a blazingly fast, Rust-powered security middleware that analyzes packages for malware, obfuscation, and CVEs without installing them.

depsentry-cli — v1.0.4

Value Proposition

Why top engineering teams rely on DepSentry.

Stop Blind Trust

Proactive Defense. Don’t wait for a vulnerability disclosure. DepSentry analyzes code behavior and reputation in real-time catching 0-day threats.

Entropy Heuristics

Malware Detection. Standard scanners miss hidden malware. We use Shannon Entropy math to detect obfuscated scripts.

Zero Friction

Blazingly Fast. Built with Rust and Rayon. Parallel processing allows scanning thousands of dependencies in milliseconds.

Typosquatting Guard

Detects packages masquerading as popular libraries (e.g., 'reacct' vs 'react') to prevent accidental installation.

CI/CD Ready

Designed for pipelines. Returns proper exit codes and JSON output for easy integration with GitHub Actions or Jenkins.

Privacy First

Your code stays yours. DepSentry only sends package metadata to public registries. No proprietary source code leaves.

Fetch & Isolate

Hybrid Scan

Report & Clean

Secure

Sandboxed Analysis Pipeline

Packages are downloaded to an ephemeral, network-isolated sandbox.

Four engines run in parallel: CVE Database lookup (OSV), Regex signature matching, Entropy calculation, and Typosquatting detection.

Receive a detailed risk score (0-100). The sandbox is instantly destroyed, leaving no footprint on your system.

Ready to secure your stack?

Bash
$ curl -sL https://depsentry.com/install.sh | bash
or view the full documentation