DepGuard

DepGuard is a plugin/extension that blocks dangerous dependency and plugin updates in CI/CD by enforcing “safe upgrade” policies. It scans pull requests and build pipelines for version bumps, new transitive dependencies, license changes, and known-vulnerable packages, then fails the check when risk thresholds are exceeded. Unlike generic vulnerability scanners, DepGuard focuses on the exact moment teams get burned: routine upgrades that quietly introduce breaking changes, malware-typosquats, or license landmines. It integrates with GitHub/GitLab/Bitbucket and posts a clear, actionable report: what changed, why it’s risky, and the safest alternative versions. An optional AI assistant explains impact in plain language and suggests minimal diffs to remediate. This is a web app + CI plugin (GitHub App plus CLI) aimed at reducing incident risk without forcing teams into heavyweight governance tools.