Issues

• [Feature]: Warn when nuget.config may fetch private packages from nuget.org

  enhancement
  dennisdoomen/packageguard#298 · Filter by author dennisdoomen opened on Oct 14, 2026

• Update the roadmap page

  documentation
  dennisdoomen/packageguard#296 · Filter by author dennisdoomen opened on Oct 12, 2026

• [Feature]: Check an existing SBOM for new vulnerabilities

  enhancement
  dennisdoomen/packageguard#295 · Filter by author dennisdoomen opened on Oct 12, 2026

• [Feature]: Support VEX statements to mark vulnerabilities as not affected

  enhancement
  dennisdoomen/packageguard#294 · Filter by author dennisdoomen opened on Oct 12, 2026

• [Feature]: Let policy rules produce warnings instead of errors

  enhancement
  dennisdoomen/packageguard#293 · Filter by author dennisdoomen opened on Oct 12, 2026

• [Feature]: Flag npm packages that run install scripts

  enhancement
  dennisdoomen/packageguard#291 · Filter by author dennisdoomen opened on Oct 12, 2026

• Add instructions on how to configure Sarif publishing on GitHub

  dennisdoomen/packageguard#244 · Filter by author dennisdoomen opened on Aug 24, 2026

• [Feature]: Feed provenance policy asserting which feed a package must come from

  enhancement
  dennisdoomen/packageguard#225 · Filter by author dennisdoomen opened on Aug 10, 2026

• [Feature]: Track risk scores over time and show trends in the report

  enhancement
  dennisdoomen/packageguard#224 · Filter by author dennisdoomen opened on Aug 10, 2026

• [Feature]: Detect typosquatting and dependency-confusion risks

  enhancement
  dennisdoomen/packageguard#220 · Filter by author dennisdoomen opened on Aug 10, 2026

• [Feature]: MSBuild integration that reports violations as build warnings in the IDE

  enhancement
  dennisdoomen/packageguard#221 · Filter by author dennisdoomen opened on Aug 10, 2026

• [Feature]: Add support for Python dependencies (requirements.txt, poetry.lock, uv.lock)

  enhancement
  dennisdoomen/packageguard#219 · Filter by author dennisdoomen opened on Aug 10, 2026

• [Feature]: Built-in policy presets that configurations can extend

  enhancement
  dennisdoomen/packageguard#218 · Filter by author dennisdoomen opened on Aug 10, 2026

• [Feature]: Generate a third-party attribution / NOTICE file with full license texts

  enhancement
  dennisdoomen/packageguard#216 · Filter by author dennisdoomen opened on Aug 10, 2026

• [Feature]: Pull-request diff mode to analyse only added or upgraded packages

  enhancement
  dennisdoomen/packageguard#215 · Filter by author dennisdoomen opened on Aug 10, 2026

• [Feature]: Machine-readable violation output (JSON, Markdown, SARIF, JUnit)

  enhancement
  dennisdoomen/packageguard#214 · Filter by author dennisdoomen opened on Aug 10, 2026

• [Feature]: First-party GitHub Action with SARIF violation annotations on pull requests

  enhancement
  dennisdoomen/packageguard#213 · Filter by author dennisdoomen opened on Aug 10, 2026

• [Feature]: Baseline and suppression file so existing codebases can adopt PackageGuard incrementally

  enhancement
  dennisdoomen/packageguard#211 · Filter by author dennisdoomen opened on Aug 10, 2026
  1