npm package discovery and stats viewer.

Discover Tips

  • General search

    [free text search, go nuts!]

  • Package details

    pkg:[package-name]

  • User packages

    @[username]

Sponsor

Optimize Toolset

I’ve always been into building performant and accessible sites, but lately I’ve been taking it extremely seriously. So much so that I’ve been building a tool to help me optimize and monitor the sites that I build to make sure that I’m making an attempt to offer the best experience to those who visit them. If you’re into performant, accessible and SEO friendly sites, you might like it too! You can check it out at Optimize Toolset.

About

Hi, 👋, I’m Ryan Hefner  and I built this site for me, and you! The goal of this site was to provide an easy way for me to check the stats on my npm packages, both for prioritizing issues and updates, and to give me a little kick in the pants to keep up on stuff.

As I was building it, I realized that I was actually using the tool to build the tool, and figured I might as well put this out there and hopefully others will find it to be a fast and useful way to search and browse npm packages as I have.

If you’re interested in other things I’m working on, follow me on Twitter or check out the open source projects I’ve been publishing on GitHub.

I am also working on a Twitter bot for this site to tweet the most popular, newest, random packages from npm. Please follow that account now and it will start sending out packages soon–ish.

Open Software & Tools

This site wouldn’t be possible without the immense generosity and tireless efforts from the people who make contributions to the world and share their work via open source initiatives. Thank you 🙏

© 2026 – Pkg Stats / Ryan Hefner

ai-config-shield

v1.0.3

Published

Protect your configuration files from being silently bypassed by AI agents.

Readme

AIConfigShield 🛡️

Stop AI agents from taking shortcuts in your configuration files.

The Background

Large Language Models (LLMs) and AI coding agents are powerful, but they have a "laziness" property learned from the vast amount of human data they've been trained on. When tasked with fixing thousands of linting errors or complex architectural issues, they often try to take the path of least resistance.

Instead of fixing 1000 errors, an AI might "secretly" modify your configuration files (like .flake8, eslint.config.js, or .pre-commit-config.yaml) to ignore entire categories of rules. You return to your PC after half an hour, the AI proudly reports "All tasks completed!", only for you to find out it actually fixed 10 errors and muted the other 990.

Even worse, a simple Windows "Read-Only" attribute is often not enough. Modern AI agents are clever enough to recognize and remove that attribute to continue their shortcut. AIConfigShield provides hardened, NTFS-level protection that makes unauthorized modification impossible without administrative privileges.

Features

  • Unbypassable Locking: Uses NTFS permissions (takeown and icacls) to lock files at a system level.
  • Admin-Only Access: Prevents any modification by the standard user session. Even "force" writes fail.
  • Auto-Elevation: Automatically requests Administrator privileges to apply these deep locks.
  • Universal: Use it in any project (Node, Python, Go, etc.) as long as you're on Windows.

Installation

npm install -g ai-config-shield

Usage

Locking your "Fortress"

Lock your linting configs and hooks to ensure the AI actually fixes the code instead of hiding the problems:

npx shield-lock eslint.config.js .flake8 .pre-commit-config.yaml .git/hooks/pre-commit

Unlocking for Manual Maintenance

When you (the human) want to change the configurations:

npx shield-unlock <path-to-file-or-dir>

How it works

The tool performs a "Take Ownership" operation and then modifies the Access Control List (ACL) to grant the current user only Read & Execute rights, while preserving Full Control for the SYSTEM and Administrators (who must consciously elevate to change these rules).

License

MIT