Npm
7 tutorials in this category.
02
How to Configure Your Package Manager to Use Chainsaw
Per-ecosystem guides for pointing npm, pip, Maven, Gradle, CocoaPods, Swift Package Manager, NuGet, Cargo, Composer, Go, Docker, RubyGems, APT, and Yum at your Chainsaw instance.
04
How to Block Malicious and Typosquatted Packages at Install Time with the Chainsaw CLI
Run npm, pip, or go through the free Chainsaw CLI so malicious and typosquatted packages are refused before they enter your build — entirely on your machine, no server, nothing leaves the box.
04
How to Route GitHub Actions Builds Through Chainsaw
Configure GitHub Actions to install packages through Chainsaw using a Service Token, repository secrets, and job-local package-manager configuration, with a PR-gating example.
05
How to Detect Install-Script Exfiltration
Block PhantomRaven-style dynamic install dependencies and obfuscated eval(atob(...)) payloads with the hasInstallScript and installScriptFetchesRemote conditions.
05
How to Route GitLab CI Builds Through Chainsaw
Configure GitLab CI to install packages through Chainsaw using a Service Token, masked CI/CD variables, and job-local package-manager configuration, with a merge-request gating example.
06
How to Route Jenkins Builds Through Chainsaw
Configure a Jenkins declarative pipeline to install packages through Chainsaw using a Username-with-password credential and job-local package-manager configuration.
30
How to Point npm at Chainsaw
Configure npm (and Bun) to install through your Chainsaw proxy via .npmrc, global config, and authentication.