depshieldx
PulseGate's liveness check found it on 3 Oct 2026; it is registered on GitHub and PyPI and has been in the index since 18 Aug 2026. How this is checked
depshieldx is an open-source command-line tool for installing and scanning packages from PyPI, npm, Yarn, pnpm, and Cargo. It checks cryptographic provenance, looks up CVEs, analyzes Docker images with Trivy and behavioral tracing, and generates signed receipts.
Inferred · not functionally tested
Overview
6 featuresPurpose: Reducing software supply-chain risk when installing packages and scanning container dependencies.
Inferred · not functionally tested
Audience: software developers and DevSecOps teams
Inferred · not functionally tested
Functions: monitoring, data_extraction
Inferred · not functionally tested
Interfaces: API: unknown · MCP: unknown · CLI: indicated (inferred, not tested) · Self-hosting: indicated (inferred, not tested)
Recorded constraints: pricing: open_source · license: Apache-2.0 · platforms: CLI · deployment: cli, self_hosted
Constraint provenance is unknown; confirm requirements with the publisher.
Record sources: pypi.org · github.com. These links do not verify the individual claims.
depshieldx sits in PulseGate's Application security & vulnerability scanning category. Inferred · not functionally tested: It focuses on reducing software supply-chain risk when installing packages and scanning container dependencies. Inferred · not functionally tested: It is built as an open-source project for software developers and DevSecOps teams. Basis unknown · not verified: depshieldx is open source under the Apache-2.0 license. Basis unknown · not verified: depshieldx is available on the command line, and it can be self-hosted.
Behind depshieldx is tee-wealth001, and it first shipped in 2026. The project is developed in the open on GitHub with 52 commits in the last 90 days. Inferred · not functionally tested: Key capabilities include package scanning, provenance checks, and CVE lookups.
Summary written by a language model from the project’s public pages.
Tasks: Inferred · not functionally tested
- Package scanning
- Provenance checks
- CVE lookups
- Docker scanning
- Trivy deep mode
- Behavioral tracing
Topics: Inferred · not functionally tested
Built with & integrations
Trust & compliance
Indexing history
1What PulseGate has recorded for this listing
Frequently asked questions about depshieldx
- What is depshieldx?
- Inferred · not functionally tested: Depshieldx focuses on reducing software supply-chain risk when installing packages and scanning container dependencies. It is catalogued under Application security & vulnerability scanning on PulseGate.
- Who should use depshieldx?
- Inferred · not functionally tested: depshieldx is an open-source project built for software developers and DevSecOps teams.
- Is depshieldx free?
- Basis unknown · not verified: Yes — depshieldx is open source under the Apache-2.0 license and free to use.
- What platforms does depshieldx run on?
- Basis unknown · not verified: depshieldx runs on the command line. It can also be self-hosted.
- Is depshieldx still maintained?
- PulseGate's liveness check found it on 3 Oct 2026. Its GitHub repository shows 52 commits in the last 90 days.
- What are alternatives to depshieldx?
- Similar projects tracked by PulseGate include depenemy, depwarden-cli, and DepWarden.depenemydepwarden-cliDepWarden
- Who develops depshieldx?
- depshieldx is developed by tee-wealth001.
- When did depshieldx launch?
- depshieldx first shipped in 2026.
Similar projects
Closest matches by what these projects do