From eac173dfa34da21762e36e4d79ee09db0dd6cc61 Mon Sep 17 00:00:00 2001 From: Sander Declerck Date: Tue, 25 Nov 2025 12:31:50 +0100 Subject: [PATCH] Update intro in README.md --- README.md | 25 +++++++++++++------------ 1 file changed, 13 insertions(+), 12 deletions(-) diff --git a/README.md b/README.md index c2ac0ad..d4faa16 100644 --- a/README.md +++ b/README.md @@ -1,20 +1,21 @@ # Aikido Safe Chain -The Aikido Safe Chain **prevents developers from installing malware** on their workstations while developing in the Javascript ecosystem (through npm, npx, yarn, pnpm, pnpx, bun and bunx). It's **free** to use and does not require any token. - -The Aikido Safe Chain wraps around the [npm cli](https://github.com/npm/cli), [npx](https://github.com/npm/cli/blob/latest/docs/content/commands/npx.md), [yarn](https://yarnpkg.com/), [pnpm](https://pnpm.io/), [pnpx](https://pnpm.io/cli/dlx), [bun](https://bun.sh/), [bunx](https://bun.sh/docs/cli/bunx), and [pip](https://pip.pypa.io/) to provide extra checks before installing new packages. This tool will detect when a package contains malware and prompt you to exit, preventing npm, npx, yarn, pnpm, pnpx, bun, bunx, or pip/pip3 from downloading or running the malware. +- ✅ **Block malware on developer laptops and CI/CD** +- ✅ **Supports npm and PyPI** more package managers coming +- ✅ **Blocks packages newer than 24 hours** without breaking your build +- ✅ **Tokenless, free, no build data shared** Aikido Safe Chain works on Node.js version 16 and above and supports the following package managers: -- ✅ **npm** -- ✅ **npx** -- ✅ **yarn** -- ✅ **pnpm** -- ✅ **pnpx** -- ✅ **bun** -- ✅ **bunx** -- ✅ **pip** (beta) -- ✅ **pip3** (beta) +- 📦 **npm** +- 📦 **npx** +- 📦 **yarn** +- 📦 **pnpm** +- 📦 **pnpx** +- 📦 **bun** +- 📦 **bunx** +- 📦 **pip** (beta) +- 📦 **pip3** (beta) # Usage