Who should use SafeDep?

Inferred · not functionally tested: SafeDep is a B2B product built for devops teams.

What platforms does SafeDep run on?

Basis unknown · not verified: SafeDep runs on the web, the command line, and API.

Is SafeDep still maintained?

PulseGate's liveness check found it on 14 Oct 2026. Its GitHub repository shows 95 commits in the last 90 days.

What projects are similar to SafeDep?

Similar projects tracked by PulseGate include SafeDep Vet, depshieldx, and DepsGuard.

SafeDep is developed by SafeDep.

Is SafeDep open source?

Basis unknown · not verified: SafeDep has a public GitHub repository.

Back to the index

SafeDep

Name: SafeDep
Author: SafeDep

safedep.ioInfrastructure

PulseGate's liveness check found it on 14 Oct 2026; it is registered on GitHub and has been in the index since 27 Jun 2026. How this is checked

SafeDep is a real-time open source software supply chain security platform. It focuses on detecting malicious packages and on governing what enters an organization’s stack across developer workflows and AI agents.

Inferred · not functionally tested

Apache-2.0WebCLIAPICloud-managed

Visit safedep.io

450stars

36forks

5features

2025since

Overview

5 features

Purpose: Protecting software supply chains from malicious packages and open source risks.

Inferred · not functionally tested

Audience: devops teams

Inferred · not functionally tested

Functions: monitoring, data_extraction, workflow_automation

Inferred · not functionally tested

Interfaces: API: indicated (inferred, not tested) · MCP: indicated (inferred, not tested) · CLI: indicated (inferred, not tested) · Self-hosting: unknown

Recorded constraints: pricing: unknown · license: Apache-2.0 · platforms: CLI, WEB · deployment: browser, cli, api_only, cloud_managed

Constraint provenance is unknown; confirm requirements with the publisher.

Record sources: safedep.io · github.com. These links do not verify the individual claims.

SafeDep sits in PulseGate's Application security & vulnerability scanning category. Inferred · not functionally tested: It focuses on protecting software supply chains from malicious packages and open source risks. Inferred · not functionally tested: It is built as a B2B product for devops teams. Basis unknown · not verified: It ships for the web, the command line, and API.

Behind SafeDep is SafeDep, and it first shipped in 2025. Development happens publicly on GitHub with 450 stars and 95 commits in the last 90 days. Inferred · not functionally tested: Key capabilities include SCA scanning, SBOM generation, and AI agent monitoring. Inferred · not functionally tested: Catalogued interfaces include an MCP server and a public API.

Summary written by a language model from the project’s public pages.

Tasks: Inferred · not functionally tested

SCA scanning
SBOM generation
AI agent monitoring
Threat intelligence
Policy enforcement

Topics: Inferred · not functionally tested

Built with & integrations

Framework

Astro

Hosting

Cloudflare

Connectors

MCPAPI

Runs on

BrowserCLIAPI-onlyCloud-managed

Detected from

Astro: astro-island in the HTML · /_astro/ in the HTML
Cloudflare: cf-ray header · cf-cache-status header

Trust & compliance

License

Apache-2.0

Public signals

HTTPSPrivacy Policy Terms of Service GitHub · ★ 450Active maintenance

Legal

Indexing history

What PulseGate has recorded for this listing

Indexed8 Oct · 12:40 UTC
Tensorlake is compromised using mini Shai Hulud seen via Hacker News firehose (Algolia)
Source: Hacker News firehose (Algolia) · Open
Indexed29 Sep · 11:55 UTC
DirtyBlanket: Fake Express Packages on NPM Spread a Linux Worm seen via Hacker News firehose (Algolia)
Source: Hacker News firehose (Algolia) · Open
Indexed28 Sep · 08:36 UTC
Detecting Compromised AI Coding Agents with Jev and Gryph seen via Hacker News firehose (Algolia)
Source: Hacker News firehose (Algolia) · Open
Indexed21 Sep · 18:41 UTC
Why Does an NPM Math Library Need an Encrypted Loader? seen via Hacker News firehose (Algolia)
Source: Hacker News firehose (Algolia) · Open

Frequently asked questions about SafeDep

What does SafeDep do?: Inferred · not functionally tested: SafeDep focuses on protecting software supply chains from malicious packages and open source risks. It is catalogued under Application security & vulnerability scanning on PulseGate.
Who should use SafeDep?: Inferred · not functionally tested: SafeDep is a B2B product built for devops teams.
What platforms does SafeDep run on?: Basis unknown · not verified: SafeDep runs on the web, the command line, and API.
Is SafeDep still maintained?: PulseGate's liveness check found it on 14 Oct 2026. Its GitHub repository shows 95 commits in the last 90 days.
What projects are similar to SafeDep?: Similar projects tracked by PulseGate include SafeDep Vet, depshieldx, and DepsGuard.SafeDep Vet depshieldx DepsGuard
Who makes SafeDep?: SafeDep is developed by SafeDep.
When did SafeDep launch?: SafeDep first shipped in 2025.
Is SafeDep open source?: Basis unknown · not verified: SafeDep has a public GitHub repository.

At a glance

Pricing: Paid · pricing page detected
Platforms: CLI · Web
Languages: English
Open source: Yes · ★ 450
License: Apache-2.0
Model: B2B
Purpose: Protecting software supply chains from malicious packages and open source risks.Inferred · not functionally tested
Audience: devops teamsInferred · not functionally tested

Registered as

GitHub: safedep/pmg

Developer

Team

GitHub

Open source

View on GitHub

Stars: 450
Forks: 36
Open issues: 31
Last commit: 26 Jun 2026
Commits 90d: 95
Contributors: 13
Authorship: Team
Default branch: main
Latest release: v0.21.2 · 26 Jun 2026

Index record

Indexed: 27 Jun 2026
Lifecycle: Alive
Last seen: 8 Oct 2026

Identity audit (12)

Slug: safedep-real-time-open-source-software-supply-chain-securit-safedep-io
Lifecycle last checked: 14 Oct 2026
Identity check: 1 linked identifier: not checked
Listing state: Listed: yes
Index status: Included in index
Latest evidence snapshot: 8 Oct 2026
Timeline basis: Indexed-at chronology. This listing's first-seen date was written by the catalog backfill, not observed here, so it is not treated as a sighting.
Name from: Derived from the project's own page and URL.
Category from: Recorded source: taxonomy-pass-a.
Languages from: Detected by a language model, checked against the page's own declaration.
Last updated: 8 Oct 2026
Canonical URL: https://safedep.io/

Cite this record

SafeDep. PulseGate. Record last updated 8 Oct 2026. https://www.pulsegate.ai/apps/safedep-real-time-open-source-software-supply-chain-securit-safedep-io

README badge

Shows this record's lifecycle in a README, and links back here.

[![PulseGate](https://www.pulsegate.ai/badge/safedep-real-time-open-source-software-supply-chain-securit-safedep-io)](https://www.pulsegate.ai/apps/safedep-real-time-open-source-software-supply-chain-securit-safedep-io)