pyguard
pyguard is a PyPI supply chain scanner focused on malicious-package detection, not just known CVEs.
Current scope
This repository now includes:
- A working
pyguard scanCLI - Core data models and scan orchestration
- Layer 1 static analysis baseline
- JSON and terminal reporting
- Project tooling, CI, and test scaffolding
Quick start
python -m venv .venv
source .venv/bin/activate
pip install -e .[dev]
pyguard scan requests==2.31.0
pytest
Roadmap
The implementation follows the multi-phase plan for:
- Layer 1 static analysis
- Layer 2 AI-assisted analysis
- Layer 3 sandbox runtime analysis
- CI/CD integrations and reporting outputs
Metadata
Release files for pyguard-ai 0.2.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| pyguard_ai-0.2.0.tar.gz | 56.0 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| pyguard_ai-0.2.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 114.0 kB
Release files / pyguard_ai-0.2.0.tar.gz
| Download URL | pyguard_ai-0.2.0.tar.gz |
|---|---|
| Size | 56.0 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
bbc9562f0b2ec95229a256f41df65abdefffa4801976106717cd802abcf7ac99
|
|
BLAKE2b-256 checksum How to use checksums |
709dba434feff92e28aeaeccd392b616ab964234d2fadb300a9d42d664686f26
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.14.0
|
Release files / pyguard_ai-0.2.0-py3-none-any.whl
| Download URL | pyguard_ai-0.2.0-py3-none-any.whl |
|---|---|
| Size | 58.0 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
aae6650fa84c78bb2cc9a521931cb9a911afbd934b6c7d466e280cb722210704
|
|
BLAKE2b-256 checksum How to use checksums |
1789875d3cd18ee47d7e3560d3b118bd852cb12682631b7794471dea32a456b8
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.14.0
|