This product was not featured by Product Hunt yet. It will not be visible on their landing page and won't be ranked (cannot win product of the day regardless of upvotes).
CapLock is a cross-platform CLI that protects npm and pnpm projects from malicious lifecycle scripts. It intercepts scripts like postinstall and runs them inside a restricted sandbox with filesystem, environment, network, and child-process isolation
I built CapLock after thinking about how much trust we give dependency install scripts by default.A malicious postinstall can potentially read secrets, modify project files, spawn child processes, or make network requests before you even run the package.
CapLock puts those scripts behind a policy-controlled sandbox.
Current protections include:
- .env / secret access blocking
- project-root write protection
- child-process containment
- default-deny network policy
- npm + pnpm support
- Windows, Linux, and macOS support
Would love feedback from developers working with Node.js, package security, or supply-chain tooling.
CapLock was submitted on Product Hunt and earned 0 upvotes and 1 comments, placing #39 on the daily leaderboard. CapLock is a cross-platform CLI that protects npm and pnpm projects from malicious lifecycle scripts. It intercepts scripts like postinstall and runs them inside a restricted sandbox with filesystem, environment, network, and child-process isolation
CapLock was featured in Open Source (68.9k followers), Developer Tools (520.4k followers), GitHub (41.4k followers) and Security (2.9k followers) on Product Hunt. Together, these topics include over 138.4k products, making this a competitive space to launch in.
Who hunted CapLock?
CapLock was hunted by Ulykbek Asylbek. A “hunter” on Product Hunt is the community member who submits a product to the platform — uploading the images, the link, and tagging the makers behind it. Hunters typically write the first comment explaining why a product is worth attention, and their followers are notified the moment they post. Around 79% of featured launches on Product Hunt are self-hunted by their makers, but a well-known hunter still acts as a signal of quality to the rest of the community. See the full all-time top hunters leaderboard to discover who is shaping the Product Hunt ecosystem.
Want to see how CapLock stacked up against nearby launches in real time? Check out the live launch dashboard for upvote speed charts, proximity comparisons, and more analytics.
Ulykbek Asylbek