# Dx Guard

> Dependency security guard for AI coding agents. Automatically scans npm, pip, pnpm, yarn, and bun packages for known vulnerabilities and malicious code before installation using OSV.dev. Zero config, zero API keys. Blocks malicious packages and warns about CVEs — so your agent never installs compromised dependencies.

## Facts
- Page: https://tashan.sh/capability/plugin-iamdxcom-dx-guard-dx-guard
- tashan id: plugin:iamdxcom/dx-guard/dx-guard
- Source: https://github.com/iamdxcom/dx-guard
- Type: plugin
- Category: security
- tashan score: 26.0 / 100
- Adoption: 13.0
- Upkeep: 44.0
- Freshness: 57.0
- Evidence coverage: 84% of the inputs this score can use
- Health: active
- Instruction depth: not yet graded
- GitHub stars: 2
- License: MIT
- Official: no

## Install

```sh
/plugin marketplace add anthropics/claude-plugins-community
/plugin install dx-guard@claude-community
```

## Security audit
Not scanned. We audit npm-published capabilities; this one has no npm package we can resolve, or has not reached the queue. This is not a clean bill of health.

---
Measured 2026-09-13 by tashan (https://tashan.sh) from public evidence. Scorer s5.