Packages

The Packages section of Dev Machine Guard gives you visibility into the packages and package-manager configuration present on your developer machines.

Where the Packages product area enforces controls at install time through Secure Registry, this section is about inventory and posture on the endpoints themselves: what is installed across your fleet, and how each machine's package managers are configured. Together they answer "what is on my developer machines, and are those machines set up to pull packages safely."

This section contains three pages:

• OSS Package Search — search across the open-source packages detected on developer machines to find where a specific package and version is installed across your fleet. Use this to locate affected machines in seconds when a compromised package is disclosed.
• System Packages — an inventory of OS-level packages installed through system package managers (Homebrew on macOS, dnf / apt and others on Linux), with version distribution, signature status, and per-device spread.
• Package Configs — an audit of package-manager configuration files (.npmrc, bunfig.toml, .yarnrc[.yml], pip.conf) across every scope on each device, showing the effective registry, whether a cooldown policy is in effect, and the authentication surface.