NpmGuard

Autonomous npm supply chain security auditor. Monitors npm for new package releases, audits them through a multi-step security pipeline, and publishes verifiable results on-chain via ENS (Sepolia) + IPFS.

Users can pay for audits on-chain (0G Galileo Testnet) via the CLI — with a private key or by scanning a WalletConnect QR code from their mobile wallet.

Any developer or AI agent can check axios.npmguard.eth before installing a package.

Built at ETHGlobal Cannes 2026

How it works

flowchart TD
    subgraph USER["User / Developer"]
        CLI[npmguard install express]
    end

    subgraph FREE["Free — Monitored packages"]
        CRON[Chainlink CRE<br/>Cron every 5 min] --> NPM[Fetch npm registry<br/>detect new versions]
        NPM --> ENS_CHECK{Read ENS on-chain<br/>already audited?}
        ENS_CHECK -->|yes| SKIP[Skip]
        ENS_CHECK -->|no| ENGINE_API
    end

    subgraph PAID["Paid — Any package"]
        CLI --> ENS_READ{Check ENS<br/>audit exists?}
        ENS_READ -->|yes| SHOW[Show verdict<br/>install from IPFS]
        ENS_READ -->|no| PAY{Pay 0.01 0G?}
        PAY -->|private key| TX[Send tx to<br/>smart contract<br/>0G Galileo]
        PAY -->|WalletConnect| QR[Scan QR<br/>confirm in wallet]
        TX --> ENGINE_API
        QR --> ENGINE_API
    end

    subgraph SERVER["Engine Server — 209.38.42.28:8000"]
        ENGINE_API[POST /audit] --> INVENTORY[Phase 0: Inventory<br/>structural triage]
        INVENTORY --> TRIAGE[Phase 1a: Triage<br/>LLM risk scoring]
        TRIAGE -->|low risk| SAFE_FAST[SAFE]
        TRIAGE -->|high risk| INVESTIGATE[Phase 1b: Investigation<br/>agentic LLM analysis]
        INVESTIGATE --> TESTGEN[Phase 1c: Test gen<br/>exploit code]
        TESTGEN --> SANDBOX[Phase 2: Sandbox<br/>Docker execution]
        SANDBOX --> VERDICT{Verdict}
    end

    VERDICT -->|SAFE| PUBLISH[Publish to ENS + IPFS]
    VERDICT -->|DANGEROUS| PUBLISH
    PUBLISH --> ENS_STORE[(ENS on Sepolia<br/>verdict, score, CIDs)]
    PUBLISH --> IPFS_STORE[(IPFS via Pinata<br/>source + report)]

    style USER fill:#fff3cd,stroke:#ffc107,color:#000
    style FREE fill:#d4edda,stroke:#28a745,color:#000
    style PAID fill:#cce5ff,stroke:#0d6efd,color:#000
    style SERVER fill:#e8daef,stroke:#8e44ad,color:#000

Loading

CLI Flow

flowchart LR
    A[npmguard install axios] --> B{ENS audit<br/>exists?}
    B -->|yes + SAFE| C[Install from<br/>verified IPFS]
    B -->|yes + DANGEROUS| D[Block install]
    B -->|no audit| E{Pay 0.01 0G?}
    E -->|yes| F[On-chain tx<br/>0G Galileo] --> G[POST /audit<br/>209.38.42.28:8000] --> H[Show verdict]
    E -->|no| I[Install from<br/>npm anyway]

Loading

How audits are triggered

Trigger	Who	Cost	How
Chainlink CRE Cron	Automated	Free	Monitors npm every 5 min, reads ENS on-chain, triggers audit for new versions
CLI + WalletConnect	Developer	0.01 0G	npx npmguard-cli install <pkg> → pays on 0G Galileo → triggers audit

Both paths end at the same engine (POST /audit), which runs the full pipeline and publishes results to IPFS + ENS.

Note: Chainlink CRE reads ENS using LAST_FINALIZED_BLOCK_NUMBER. On Sepolia, finality takes ~15 min, so newly published audit records won't be visible to the cron until the block is finalized.

Live Services

Service	URL
Frontend Dashboard	http://209.38.42.28:3000
Audit Engine API	http://209.38.42.28:8000
CLI (npm)	npx npmguard-cli
0G Contract	0x1201448ae5f00e1783036439569e71ab3757d0de
ENS Registry	npmguard.eth

ENS Registry

npmguard.eth
  └── axios.npmguard.eth
        └── 1-14-0.axios.npmguard.eth
              ├── npmguard.verdict      → safe
              ├── npmguard.score        → 92
              ├── npmguard.capabilities → network
              ├── npmguard.report_cid   → bafkrei...
              └── npmguard.source_cid   → bafybei...

Project Structure

Directory	Description
frontend/	React + Vite dashboard — live audit streaming with SSE
engine/	TypeScript audit pipeline — inventory, static analysis, sandbox
cli/	npmguard-cli — check/install packages with ENS audit + on-chain payment
contracts/	Solidity smart contract + multi-chain deploy/verify scripts
chainlink/	CRE workflow — monitors npm, reads ENS on-chain, triggers audits
npmguard/	ENS/IPFS publisher, demo packages, sginstall
sandbox/	Dynamic exploitation harness (Vitest)
ai-sdk/	AI SDK-based vulnerability verifier prototype
openclaw/	OpenClaw-based verifier prototype and Dockerized reasoning runtime
docs/	Architecture docs, research notes, production guides

Quick Start

CLI

# Install a package with on-chain audit (pays 0.01 0G via WalletConnect QR)
npx npmguard-cli install express

# Check all dependencies in a project
npx npmguard-cli check --path /your/project

Audit Engine API

The engine is live at http://209.38.42.28:8000.

# Health check
curl http://209.38.42.28:8000/health

# Trigger an audit
curl -X POST http://209.38.42.28:8000/audit \
  -H 'Content-Type: application/json' \
  -d '{"packageName": "express", "version": "5.2.1"}'

Run locally (engine + frontend)

bash run.sh
# Engine on :8000, Frontend on :3000

Or individually:

cd engine && npm install && npx tsx src/index.ts   # API on :8000
cd frontend && npm install && npm run dev           # UI on :3000

Deploy (DigitalOcean)

See engine/README.md for full instructions.

Chainlink CRE Workflow

Decentralized npm monitoring via Chainlink CRE. Runs on the DON (Decentralized Oracle Network) — no single point of failure. Each trigger fetches npm, reads ENS on-chain (trustless via EVMClient), and triggers the audit engine if the package isn't yet audited.

cd chainlink/npm-monitor && bun install

Command	What it does
cre workflow simulate npm-monitor -T staging-settings --trigger-index 1 --non-interactive --limits limits.json	Cron — checks all monitored packages every 5 min
cre workflow simulate npm-monitor -T staging-settings --trigger-index 0 --http-payload '{"package":"axios"}' --non-interactive --limits limits.json	HTTP trigger — check a single package on demand

Deploy Contract

cd contracts && npm install && npm run compile

# Deploy on 0G Galileo (default)
DEPLOY_CHAIN=og npm run deploy

# Deploy on Sepolia or Base Sepolia
DEPLOY_CHAIN=sepolia npm run deploy
DEPLOY_CHAIN=base-sepolia npm run deploy

OpenClaw Verifier

The Dockerized OpenClaw verifier prototype, model-switching commands, and manual fixture commands are documented in openclaw/README.md.

Tech Stack

Component	Technology
Frontend	React + Vite + Tailwind CSS — real-time SSE audit dashboard
Audit Pipeline	TypeScript + Hono — inventory, LLM static analysis, Docker sandbox
LLM	Gemini 2.5 Flash via OpenAI-compatible API (switchable to Anthropic)
Monitoring	Chainlink CRE — Cron + HTTP + EVMClient
Payment	Solidity smart contract on 0G Galileo Testnet + WalletConnect v2
On-chain Registry	ENS subnames on Sepolia
Storage	IPFS via Pinata
CLI	TypeScript, published as npmguard-cli on npm
Hosting	DigitalOcean Droplet (Docker + Node.js)

Team

Built at ETHGlobal Cannes 2026.