secpipw

secpipw is an open-source Python package designed to enhance supply-chain security during package installation by acting as a safer wrapper around the standard pip command. It analyzes and mitigates supply-chain risks when installing packages, allowing users to use `spip install` as a drop-in replacement for `pip install` while still supporting additional package managers like pipx and poetry. This tool does not require configuration, aiming for ease of use while providing comprehensive checks against potentially malicious packages.