
Research
/Security News
737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.
@weave_protocol/full
Advanced tools
The complete Weave Protocol security suite for AI agents - 13 packages covering policy (WARD.md), enforcement (4 harness adapters), scanning, encryption, compliance, consensus, supply chain, and observability
The complete Weave Protocol security suite — one install.
npm install @weave_protocol/full
That's it. You now have every Weave Protocol package installed:
| Package | What it does |
|---|---|
| 🛡️ @weave_protocol/mund | Security scanner — secrets, PII, injection, MCP vetting, threat intel |
| 🏛️ @weave_protocol/hord | Encrypted vault with Yoxallismus cipher |
| ⚖️ @weave_protocol/domere | Compliance (SOC2/HIPAA/PCI-DSS/GDPR/CCPA) + blockchain anchoring |
| 👥 @weave_protocol/witan | Multi-agent consensus & governance |
| 🔍 @weave_protocol/hundredmen | Real-time MCP proxy with drift detection |
| 🛂 @weave_protocol/tollere | Supply chain security — npm, Docker, IDE extensions |
| 🔗 @weave_protocol/langchain | LangChain.js security callbacks |
| 🔌 @weave_protocol/api | REST API + monitoring dashboard |
You can import from the bundle:
import { mund, hord, tollere } from '@weave_protocol/full';
const scan = await mund.scan("My API key is sk-1234...");
const risk = await tollere.scanPackage("axios", "1.7.2");
Or from individual packages — same effect:
import { scan } from '@weave_protocol/mund';
import { scanPackage } from '@weave_protocol/tollere';
For framework detection, scaffolding, and config generation, use @weave_protocol/cli:
npx @weave_protocol/cli init
It detects whether you're using LangChain, LlamaIndex, MCP, OpenAI, or Anthropic SDKs and scaffolds the right security middleware for your stack.
Some users want to evaluate the whole suite or build something that uses several packages together. Installing everything via one dependency keeps package.json clean and ensures version compatibility across the suite.
If you only need a few packages, install them individually — the bundle is purely additive.
Apache 2.0 — See LICENSE
FAQs
The complete Weave Protocol security suite for AI agents - 13 packages covering policy (WARD.md), enforcement (4 harness adapters), scanning, encryption, compliance, consensus, supply chain, and observability
We found that @weave_protocol/full demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.