
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@claudexor/policy
Advanced tools
Typed risk classifier + thin policy (path guard, require-human, deny lists). No keyword-regex governance.
Internal package of Claudexor — Typed risk classifier + thin policy (path guard, require-human, deny lists). No keyword-regex governance.
Published as part of the Claudexor toolchain; it follows the monorepo's
lockstep version and has no separate semver contract. Use the claudexor
CLI (or @claudexor/cli) as the supported entry point.
FAQs
Typed risk classifier + thin policy (path guard, require-human, deny lists). No keyword-regex governance.
We found that @claudexor/policy demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.