Coverage

One agent. Every package ecosystem.

A local deny-by-default gate for each package manager. Run scanopy doctor to see what's protected on any machine.

EcosystemToolsRegistryStatusMalicious blocked
npmnpm, npx, yarn, pnpm, bunregistry.npmjs.orgstable14,777
Gogoproxy.golang.orgstable18
PyPIpip, poetry, uv, pipenvpypi.orgbeta11,407
crates.iocargocrates.iobeta9
RubyGemsgem, bundlerubygems.orgbeta972
Mavenmvn, gradlerepo1.maven.orgbeta2
NuGetdotnet, nugetapi.nuget.orgbeta773
Packagistcomposerpackagist.orgbeta1
SPMswiftgithub.com (SwiftPM)beta0

stable = single-host path gating, well tested. beta = multi-host / metadata-rewrite routing, functional and improving. Coming next: Hex, pub, CPAN, and OS package managers (Homebrew, apt, Chocolatey).