npm installs packages blindly — I built a CLI to fix that

Hey everyone, I recently built a small CLI tool called guard-install that analyzes npm packages for potential risks before installing them. 👉 Try it: npx guard-install axios The idea came from noticing how npm installs packages blindly, even though supply chain attacks and malicious packages are becoming more common. What it does: Checks package metadata (publish recency, maintainers, downloads) Detects install scripts (postinstall / preinstall) Scans dependencies (depth-limited) Calculates a r