#pypi

Open-source server that refuses vulnerable package installs. The backend the refuse CLI shim calls.

Local AgentOps for cross-vendor CLI coding agents: route work, recover state, and accept only with evidence.

Measuring how often, and how reproducibly, LLMs hallucinate package names that don't exist — the slopsquatting supply-chain attack surface. Phase 1: detection and measurement only, read-only against PyPI/npm.

Stop solving the same code twice — a local-first distributed reasoning cache: anonymous compatibility evidence from real environments plus verified minimal samples for coding LLMs.