v1.1.0

Install sloppy-joe 1.1.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/brennhill/sloppy-joe/releases/download/v1.1.0/sloppy-joe-installer.sh | sh

Download sloppy-joe 1.1.0

File	Platform	Checksum
sloppy-joe-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
sloppy-joe-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
sloppy-joe-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
sloppy-joe-aarch64-unknown-linux-musl.tar.xz	ARM64 MUSL Linux	checksum
sloppy-joe-x86_64-unknown-linux-musl.tar.xz	x64 MUSL Linux	checksum

Catch hallucinated, typosquatted, and non-canonical dependencies before they reach production.

Catch hallucinated, typosquatted, and non-canonical dependencies before they reach production.

The problem

AI code assistants hallucinate package names. When Copilot writes pip install liteelm instead of litellm, that typo might be a real package on PyPI — registered by an attacker to steal credentials. Existing security tools don't catch this because they only scan for known vulnerabilities in packages that already exist in your lockfile. They assume your dependencies are real.

sloppy-joe doesn't.

What it checks

• Existence — Verifies every dependency actually exists on its registry
• Similarity — 11 mutation generators flag names close to popular packages (typosquatting, homoglyphs, keyboard proximity, combo-squatting)
• Canonical — Enforces your team's approved package choices
• Vulnerabilities — Known CVEs via OSV.dev
• Metadata signals — Version age gates, maintainer changes, install scripts, missing repository URLs

8 ecosystems

npm, PyPI, Cargo, Go, Ruby, PHP, JVM (Gradle/Maven), .NET

Quick start

• uses: brennhill/sloppy-joe@v1

With config

• uses: brennhill/sloppy-joe@v1
  with:
  config: https://raw.githubusercontent.com/yourorg/configs/main/sloppy-joe.json

AI-agent safe

Config lives outside your repo. An AI agent with shell access can't rewrite it to allowlist its own hallucinated dependencies. Use a remote config URL in CI for maximum security:

config: https://raw.githubusercontent.com/yourorg/private-configs/main/sloppy-joe.json

Also available via

• cargo install sloppy-joe
• brew install brennhill/tap/sloppy-joe
• nix profile install github:brennhill/sloppy-joe
• pre-commit hook

v0.11.0

Install sloppy-joe 0.11.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/brennhill/sloppy-joe/releases/download/v0.11.0/sloppy-joe-installer.sh | sh

Download sloppy-joe 0.11.0

File	Platform	Checksum
sloppy-joe-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
sloppy-joe-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
sloppy-joe-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
sloppy-joe-aarch64-unknown-linux-musl.tar.xz	ARM64 MUSL Linux	checksum
sloppy-joe-x86_64-unknown-linux-musl.tar.xz	x64 MUSL Linux	checksum

v0.10.0

Install sloppy-joe 0.10.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/brennhill/sloppy-joe/releases/download/v0.10.0/sloppy-joe-installer.sh | sh

Download sloppy-joe 0.10.0

File	Platform	Checksum
sloppy-joe-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
sloppy-joe-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
sloppy-joe-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
sloppy-joe-aarch64-unknown-linux-musl.tar.xz	ARM64 MUSL Linux	checksum
sloppy-joe-x86_64-unknown-linux-musl.tar.xz	x64 MUSL Linux	checksum

v0.9.1

Install sloppy-joe 0.9.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/brennhill/sloppy-joe/releases/download/v0.9.1/sloppy-joe-installer.sh | sh

Download sloppy-joe 0.9.1

File	Platform	Checksum
sloppy-joe-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
sloppy-joe-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
sloppy-joe-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
sloppy-joe-aarch64-unknown-linux-musl.tar.xz	ARM64 MUSL Linux	checksum
sloppy-joe-x86_64-unknown-linux-musl.tar.xz	x64 MUSL Linux	checksum