hood, an early supply-chain firewall experiment

We are putting out hood as an early experiment.

hood is a supply-chain firewall. It sits between your fetching tools and the network and looks at what comes back before you get to run it. A public package, a private package, a tarball behind curl — all the same to hood: unfamiliar bytes, inspected on your machine and handed to the tool only if they check out.

The short version:

• Nothing changes. You still type npm ci and pip install. hood installs shims for the fetching tools on your PATH and stays out of the way of local work like go test and cargo build.
• Nothing leaves. Unknown artifacts are decomposed by cleave and classified by Atomdrift Scan, on your machine. No cloud scanner, no API key, no telemetry, no private package sent to a third party.
• It judges behavior, not names. Because it scores what an artifact does, it can flag a previously unseen 0-day supply-chain attack instead of waiting for a feed to name it. Like isomer, it is an application of the same local detection stack.
• In doubt, it stops. A fetch fails closed if scanning cannot start.

The coverage table on the project page compares hood with a few related tools, tool by tool.

Our initial build is on GitHub at atomdrift-project/hood.