DepsGuard: Open-source Rust tool to harden package manager configs against supply chain attacks

Summary

DepsGuard is an open-source Rust tool (single static binary, zero Rust crate dependencies) that hardens package manager configurations against supply chain attacks. It scans for npm, pnpm, yarn, bun, and uv config files on a machine, compares them to recommended supply-chain security settings, and can interactively apply fixes with backups. It also scans for Renovate and Dependabot configs in repositories. The tool never runs package installs and only edits config files with user approval.