Add dependency malware checker hook for Claude Code#1184

Merged

John-David Dalton (jdalton) merged 7 commits intomainfrom

feat/check-new-deps-hook

Apr 11, 2026

Commits on Apr 10, 2026

feat(hooks): add check-new-deps hook to block malware packages
John-David Dalton (jdalton)
committed
refactor(tests): use @socketsecurity/lib spawn and whichSync instead of child_process
John-David Dalton (jdalton)
committed
fix(hooks): use JSON parser for Pipfile.lock instead of regex extractor
John-David Dalton (jdalton)
committed
fix(hooks): use nullish coalescing for new_string/old_string/content
John-David Dalton (jdalton)
committed
fix(hooks): add regex fallback for partial Pipfile.lock content
John-David Dalton (jdalton)
committed
fix(hooks): strip .git suffix from Swift names, remove spurious brew key
John-David Dalton (jdalton)
committed

Commits on Apr 11, 2026

fix: fix Cargo.toml and npm extractor false positives
John-David Dalton (jdalton)
committed