The first public release of Kratex is live on npm. Install the CLI and Kratex enforces what each dependency is allowed to do, at install time and at runtime.
- Install hardening. Lifecycle scripts are gated against your policy before they run.
- Runtime enforcement. Filesystem, network, and process access is attributed to the package in the caller chain and checked against policy on every operation.
- Built-in protections. Credential reads, crypto-wallet reads, network and process spawns from lifecycle scripts, and dependency self-propagation are blocked by default.