safedeps

`safedeps` is a command-line tool that enhances security for AI coding agents by pre-approving dependencies against vulnerabilities from multiple advisory sources before installation and ensuring no unapproved packages are introduced. It enforces compliance through re-verification of the dependency tree post-installation and can automatically roll back any that are found to be insecure. Designed for local use with no runtime dependencies, it also provides features for auditing and managing secrets within the repository.