dependencyfirewall/

Package fsx contains small filesystem helpers shared across the dependency-firewall packages.

Package gomodproxy serves the Go module proxy protocol on loopback so the Dependency Firewall can check module zips without a MITM certificate: go and git on macOS trust only the system store, and installing the firewall's CA there needs sudo.

Package pm runs a supported package manager (npm, pip, gem, ...) behind the Dependency Firewall's local MITM proxy.

Package policy decides whether a package coordinate is allowed by the GitLab Dependency Firewall.

Package purl parses Package URL (PURL) strings into the subset the Dependency Firewall check command supports: npm, pypi, maven, gem, cargo, and golang.