install-guard

/plugin marketplace add DijitalPi/claude-plugins
/plugin install install-guard@dijitalpi

Models invent package names now and then, and the names they invent most often get registered by someone waiting for exactly that — so an ordinary looking install command can pull a real package written by a stranger. The hook does one lookup first: a name the registry has never heard of is blocked, a package that is brand new or barely downloaded raises a question with the numbers attached, and everything else passes without a word. npm, pnpm, yarn, bun, pip and uv are covered; git URLs, local paths and plain lockfile restores are ignored because there is no name to check. Age and download thresholds, an allowlist for internal packages and the block-unknown switch sit in a config file, and an unreachable registry means the check is skipped rather than failed.