DepGateControl what enters your software supply chain

One gateway for npm, PyPI, Maven, Go, NuGet, Cargo, Composer and RubyGems. Block malware, vulnerable versions and unapproved licenses before they reach a developer laptop or a build.

Get started

Install

Connect your package manager

🛡️

Malware blocked by default

A synced feed of more than 200,000 known-malicious packages is checked on every download, before any policy.

📜

Policies you can read

Block by vulnerability (CVSS and EPSS), license, release age, release type, project health or package name. Each policy says in one sentence what it does.

👁️

Monitor before you enforce

Run a new policy in monitor mode, see exactly which downloads it would break, approve what must keep working, then enforce.

🏷️

Stop dependency confusion

Your internal package names are served only from your internal registries, never from a public look-alike.

🔎

Answers for developers

Package check shows which versions are allowed, why the others are blocked, and the newest version to install. Blocked developers request a time-bound waiver.

🧾

Every decision on record

The Decision Ledger records each block with the reason, the policy and who asked. The Audit Log records every change and sign-in. Stream both to your SIEM.