All Claude Code modsPedroLaRosa/claude-code
dep-bouncer
Supply-chain gate: vets npm/pnpm/yarn/bun installs against the registry before they run
dep-bouncer reaches L3 (network) and passed claude plugin validate on Claude Code 2.1.302.
- Events hooked: 1
- API methods referenced: 3
- Access from classified calls: L3, network: network, draws
- Static scan, not a runtime test
Install hint
/plugin install dep-bouncer --marketplace PedroLaRosa/claude-codeFrom the repository's own marketplace. Confirm the plugin name in the repository's README before installing. Mods need Claude Code 2.1.287 or later.
Access
L3 Uses the networknetwork, drawsValidation
Passed on Claude Code 2.1.302View the source on GitHub Back to the list
What the scan recorded
- Observed events
- Bash calls
- Hooks
tool.call {tool=Bash}- API calls
$.clock.now, $.http.fetch, $.ui.toast- Validation on 2.1.302
- Passed
- Scanned revision
9e553ede78f4- Marketplace passed
- pedro-la-rosa-claude-code
These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.
More from PedroLaRosa/claude-code
- lazygit-popupalt+g opens lazygit in a tmux popup; ESC (or q) quits lazygit and closes it
- lensPuts tsc, linter and secret-scan diagnostics in the result of every Edit and Write, so Claude fixes what it b…
- model-effort-switcherShows the model and effort under the prompt, cycled with alt+up/down (model), alt+left/right (effort) and alt…
- token-weather-usageDemo: colored pills above the prompt: context tokens with weather, 5h/7d limits vs time elapsed, prompt cache…
Badge for your README
Authors can show the latest scan result in their README. Each badge links to this page.
[](https://mods.aidojo.si/mods/PedroLaRosa--claude-code--dep-bouncer/)
[](https://mods.aidojo.si/mods/PedroLaRosa--claude-code--dep-bouncer/)