From the source
Replit already scans your projects for vulnerable dependencies, and audits your dependencies before you publish.
But risk shows up earlier than that, while you are developing, the moment a malicious package gets installed.
Today we're launching Package Firewall , in partnership with Socket (a software supply-chain security company) .
Package Firewall blocks malicious and compromised packages from ever being installed into your app, even while you are building.
This network-level security protection eliminates any window for malware to be installed into your project.
It's on by default for every builder, with nothing to set up.
Since rolling out a week ago, Package Firewall has been blocking around 8,000 packages per day across builders on Replit.
Over the course of a year, millions of vulnerable package installs will be blocked, leaving builders and their users safer: “Replit is helping define how the next generation of software gets built, with AI agents working alongside developers to create and ship applications faster.
That makes install-time security more important than ever.
…
