guarddog

library2.10.0pypypi✓ verified 80d ago

GuardDog is a CLI tool for identifying malicious open source packages, supporting PyPI, npm, and other ecosystems. Current version is 2.10.0, released June 2025. The project is actively maintained by DataDog with frequent releases.

devops auth-security

pip install guarddog

github ↗package ↗homepage ↗

INSTALL

IMPORT

SIG · GUARDDOG

guarddog

devopspythonv2.10.0

harness data pending

Install & Compatibility

Where this runs

No compatibility data collected yet for this library.

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

PypiPackageScanner

✓ from guarddog import PypiPackageScanner

✗ from guarddog import GuardDog

NPMPackageScanner

✓ from guarddog import NPMPackageScanner

GoModuleScanner

✓ from guarddog import GoModuleScanner

Quickstart: scan a known PyPI package or local directory for malicious indicators.

from guarddog import GuardDog from guarddog.scanner import Scanner gd = GuardDog() # Scan a package by name and ecosystem results = gd.scan_package("requests", ecosystem="pypi") print(results) # Or use Scanner for local directories scanner = Scanner() local_results = scanner.scan_directory("./package") print(local_results)

guarddog --version

Debug

Known issues

breakingIn v2.7.0, code execution rule was extended to init files, which may cause false positives for packages with code in __init__.py.

fix

Review results carefully and use --exclude-rule if needed.

affects: >=2.7.0

deprecatedThe CLI option `--scan-type` has been replaced by `--ecosystem` in v2.4.0.

fix

Use `--ecosystem pypi` instead of `--scan-type pypi`.

affects: >=2.4.0

gotchaGuardDog requires semgrep to be installed for some rules; scanning may silently skip rules if semgrep is missing.

fix

Install semgrep separately: `pip install semgrep`.

affects: all

Upgrade

Version history

2.10.0latest on PyPI · released May 7, 2026

Audit

Dependencies

semgrepoptionalUsed for some scanning rules; must be installed separately for full functionality.

Agent activity

29 hits · last 30 days

node

OpenAI (training)

Resources

githubhttps://github.com/DataDog/guarddog ↗

packagehttps://pypi.org/project/guarddog/ ↗

homepagehttps://www.datadoghq.com/blog/guarddog-oss-ecosystem-security/ ↗