# Chainsaw by Chain305 (chain305.com)

Blocks malicious and typosquatted package installs from npm, pip, cargo, gem and go with a local shell hook before download.

- Atlas card: https://inite.ai/en/atlas/chain305.com
- Site: https://chain305.com
- For: Engineering teams and developers guarding npm, pip, cargo, gem and go installs against malicious or typosquatted packages
- Categories: security
- Use not measured/100 · alive 100/100

## Used for

- Refuse typosquatted or malicious packages before they download
- Enforce one signed policy across CI, registries and laptops
- Gate pull requests on dependency changes

## Price

- from 25 USD/user-month, free plan (read 2026-10-30 on https://chain305.com/pricing/)

## For developers

- MCP server: com.chain305/chainsaw (namespace; auth on 2026-10-30)
- Read 2026-10-30

## MCP server, measured daily

Server: https://chain305.com/chainproxy/mcp, checked every day since 2026-10-30 (4 checks).

- Answered: measuring, 4 daily checks so far
- Median first answer: 714 ms
- Sign-in: OAuth (the client signs the user in)
- Method: https://inite.ai/en/atlas/mcp/report

## Your data

- Certifications stated: soc2, iso27001, gdpr, ccpa
- Training on your data: no (https://chain305.com/legal/privacy)
- Read 2026-10-30

---

Source: INITE Atlas, https://inite.ai/en/atlas/chain305.com. JSON: https://inite.ai/api/atlas/chain305.com. MCP: https://inite.ai/api/mcp (atlas_lookup).