I build the trust boundary for autonomous code. If you let an AI agent run npm install on its own, you need two things: a gate on what is allowed in, and a record of what it did that you cannot quietly edit afterward.

npmguard is the inbound gate. GoLogX is the outbound record. The same install-time gate is also being proposed upstream into the agents themselves. Single-binary, dependency-light, carried all the way to install.

Gate the install. Record the action.

An npm install firewall for AI coding agents. It scores every package against OSV malware data, typosquat and slopsquat heuristics, and install-script analysis, then returns a verdict before any lifecycle script runs. Works in Claude Code, Cursor, and Codex over MCP, or as a plain CLI.

Proof you can check: refuses real OSV malware (for example lodahs, MAL-2025-25502). Ships as one Rust binary, deliberately off npm and installed straight from source, so the gate cannot be poisoned by the registry it guards.

A tamper-evident audit core for Go. An append-only, hash-chained, optionally Ed25519-signed log/slog handler. If anyone edits, deletes, reorders, or forges a line, the offline logx verify command catches it and reports the first entry that was touched.

Proof you can check: zero external dependencies. The integrity code is built on the standard library alone (crypto/sha256, crypto/ed25519, crypto/rand), so the thing that proves your logs were not tampered with carries no third-party code in its own trust path.

Merged (landed):

• npmguard listed in the awesome-software-supply-chain-security registry (bureado, PR #65).
• GoLogX listed in awesome-go (avelino, PR #6389).

Proposed upstream (open, in review, not merged):

The same install-time gate, pushed into the agents themselves as a supply-chain inspector.

• Continue: idea adopted by a maintainer and implemented in open PR #12727 (not yet merged, their commit). From open issue #12573.
• OpenHands: SupplyChainSecurityAnalyzer, open issue #3560. Maintainers triaged it as an enhancement and pinged their security lead.
• Cline: open issue #11340.
• Crush: open issue #3090.
• Goose: supply-chain typosquat inspector, PR #9642, closed by a maintainer who praised the work and asked for a smaller, design-aligned PR first.

• atlas-ragnarok: a terminal color theme plus a storm-fire GLSL shader, accepted into the Zed extension registry.
• GoFunAndChallenges: a hands-on Go course, runnable lessons and challenges, every package tested.