is this
package sus?

help your coding agent block
unsafe installs

$npm install -g brin

secure / tokenless / agent-ready

40,156

packages investigated for agentic threats.

38,192 clean1,902 warning62 critical
npm
PyPI
skills.sh
Crates.io
Crates.iosoon
MCP
MCPsoon

red teaming agents scanning for

prompt injectionerror manipulationtyposquatting

works with your
coding agent

add brin in minutes. no new commands,
no new workflows.

prefer the terminal? brin add <package> works too. supports npm, yarn, pnpm, bun, and pip.

AGENTS.md, built in

brin can generate compressed docs for every package and write them to AGENTS.md. agents code faster and safer when they have accurate dependency docs from the start.

based on evals: agents with AGENTS.md docs achieve 100% pass rate vs 53% without them.

Read the AGENTS.md docs
# AGENTS.md
[brin Docs Index]|root: ./.brin-docs
|IMPORTANT: Prefer retrieval-led reasoning
|packages:{express.md,lodash.md}
[/brin Docs Index]
# .brin-docs/express.md
## Quick Start
import express from 'express';
const app = express();
app.listen(3000);
brin

stop the impostors

secure / tokenless / agent-ready

Get started