DataDog/guarddog

Health v2 · maintenance only

Adoption not part of the score

1194 stars · 121 forks observed · 2026-09-03

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

GuardDog is a CLI tool from Datadog that identifies malicious packages on PyPI, npm, Go modules, Rust crates, RubyGems, GitHub Actions, and VSCode extensions. It combines YARA-based static analysis with package metadata heuristics and a risk-correlation model that scores findings based on attack chains.

Use cases

• scan pypi packages for malware
• detect malicious npm packages before installing
• audit dependencies for supply chain attacks
• check if a package is a typosquat
• scan rust crates and rubygems for malicious code
• integrate malicious package scanning into CI

When to choose

• you want to vet open-source dependencies for malicious behavior before adding them
• you need multi-ecosystem coverage (npm, PyPI, Go, Rust, RubyGems) in one tool
• you want risk-scored findings instead of raw pattern matches to reduce alert fatigue

When to avoid

• you need runtime or dynamic analysis of package behavior
• you need full SAST vulnerability scanning (CVEs) rather than malicious-package detection
• you need a managed commercial supply-chain security platform with policy enforcement

Facets

cli-tool · maturity active

security vulnerability-scanning cli developer-tools security developer-tools crawlers python cli cross-platform supply-chain-security malicious-packages pypi npm static-analysis yara package-scanning dependency-audit

Member repositories

For agents

markdown · JSON · MCP: product_card(name="DataDog/guarddog")