iml1s/aigate dependency scan
Scan lockfile dependencies for malicious packages using AI multi-model consensus
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| lockfile | Path to lockfile (requirements.txt, uv.lock, package-lock.json, yarn.lock, pnpm-lock.yaml, pubspec.lock) | yes | — |
| ecosystem | Optional package ecosystem override (pypi, npm, pub) | no | "" |
| fail-on | Fail threshold: malicious, suspicious, or any | no | malicious |
| skip-ai | Skip AI analysis, only run static pre-filter | no | true |
| python-version | Python version to use | no | 3.12 |
Outputs
| name | description |
|---|---|
| exit-code | aigate exit code (0=safe, 1=suspicious, 2=malicious, 3=error) |
| report | JSON scan report |