LIVE · phi/watch · npm + Go supply chain monitor

24/7 vigil over 12 npm and Go packages.

The phi engine scans every published version of every package on our watchlist — npm and Go modules alike — around the clock. When a detector or OSV advisory fires, you see it here. Submit an npm package or a Go module path below to add it to the live feed.

live feed and on-demand submission are open to everyone · sign up free for email alerts and a personal watchlist — pro tier is coming later