Claude Code mod

dependency-bouncer

Vets npm and PyPI packages before they install: blocks hallucinated, typosquatted and brand-new install-script packages, flags risky ones

Guard & safety modsValidates on Claude Code 2.1.316 Source

Install

From source
git clone https://github.com/ccdwyer/dependency-bouncer.git
claude --plugin-dir ./dependency-bouncer/.

The repo has no marketplace file, so load the plugin folder directly with --plugin-dir.

What it can access

Reach
L3Network: network, reads files, reads env vars, reads mod state, draws
Sees
every tool call
Hooks
session.startcommand.runtool.call

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

  • A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
  • It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
  • Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
  • Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Claude Code docs

Details

Repository
ccdwyer/dependency-bouncer
Folder
.
Author
Chris Dwyer
Type
Guard & safety mods
License
MIT
Last updated
2 October 2026
Listed in
awesome-claude-code-mods

FAQ

What is dependency-bouncer?

Vets npm and PyPI packages before they install: blocks hallucinated, typosquatted and brand-new install-script packages, flags risky ones It is a mod for Claude Code, from ccdwyer/dependency-bouncer on GitHub.

What can the dependency-bouncer mod access?

Its widest reach is "network" (network, reads files, reads env vars, reads mod state, draws). It sees every tool call. Like any mod, it runs with your permissions.

How do I install dependency-bouncer?

Clone ccdwyer/dependency-bouncer and start Claude Code with --plugin-dir pointing at the mod's folder (.).

More guard & safety mods

delete-guard

Tihi321/claude-mods

Holds recursive deletes (rm -rf, Remove-Item -Recurse, rmdir /s, git clean -f), shows what would go, and offers move-to-trash with /undo-delete, delete, or refuse. Leaves a receipt.

Guard & safety mods/plugin install

env-guard

ABDUAZIZX/env-guard

Claude Code mod: blocks Claude from reading .env secret files and counts blocked attempts in the status line

Guard & safety mods/plugin install

delete-guard

systemNEO/claude-code-mods

Deleting outside the project folder requires the user's approval (Bash, PowerShell, cmd, subagents, MCP).

Guard & safety mods/plugin install

explain-permission

petershk/explain-permission

Explains each Claude Code permission request in plain English (WHAT, WHY, RISK) in a side pane

Guard & safety mods/plugin install

delete-guard

EmanueleNene/claude-mods

A pane that lists the files a delete command would remove, with a keep/delete toggle per file and Confirm or Refuse buttons.

Guard & safety mods/plugin install

flightdeck

jidhra/claude-mods

Flightdeck: a live agent dashboard for Claude Code. Main model vitals, an on-call architect, every permission check, subagent cards and swimlanes, a turn receipt, a Pinboard of todos, decisions and links, and a session log, all from real session events

Guard & safety mods/plugin install

Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.