STARGUARD

Summary from the TLDR newsletter

Fake stars are rampant and supply chain attacks are rising. StarGuard is a command-line tool for detecting fake-star campaigns, dependency hijacks, license red flags, and other signals of open-source risk. It was designed to automate open-source due diligence so it can be done in seconds. StarGuard only uses public metadata (unless a token is provided) and it doesn't execute any code.