---
title: "Review every new package · Agent Wranglers"
url: https://agentwranglers.se/playbook/application-security/supply-chain/review-new-packages
id: APS-70
level: Recommended
updated: 2026-10-27
build: a2a6bdfed830
tokens: 1048
licence: "CC BY 4.0"
licence_url: https://creativecommons.org/licenses/by/4.0/
---

# Review every new package

For AI agents: the [site map](https://agentwranglers.se/llms.txt) lists everything here, and this page sits under [Supply chain](https://agentwranglers.se/playbook/application-security/supply-chain.md).

By [Agent Wranglers](https://agentwranglers.se/authors/agent-wranglers.md). Updated 2026-10-27.

- ID: APS-70
- Level: Recommended
- Chapter: [Supply chain](https://agentwranglers.se/playbook/application-security/supply-chain.md)
- Rule: Check every new dependency before adding it. Attackers publish packages with names close to popular ones, and take over abandoned ones.
- Check: A build step compares the dependency list with the main branch. Each new direct dependency must have an entry in a reviewed list, such as `dependencies.md`, with its reason, publisher and source address. The step fails on a new package without an entry, or an install script not on the allowed list. It also fails on a version younger than [the release wait](https://agentwranglers.se/playbook/application-security/supply-chain/release-cooldown.md).
- How: Check the exact name, the publisher, the download count and the last release. Write the reason and the official source in the change that adds it. Read any install script. Prefer the standard library or a few lines of your own over a tiny package. Turn off install scripts where you can. Packages an AI suggests may not exist yet, as [check that every package exists](https://agentwranglers.se/playbook/ai-assisted-development/reviewing-agent-output/no-invented-packages.md) explains.

## Examples

**Using these examples:** they show one way to follow this rule. Keep the behaviour and the check, not the syntax. Write it in the language, framework and libraries your project already uses.

### Shell example

```sh
npm config set ignore-scripts true
```

## Sources

- [OpenSSF Concise Guide for Evaluating Open Source Software](https://best.openssf.org/Concise-Guide-for-Evaluating-Open-Source-Software)

## Related rules

- AID-17 [Check that every package and API exists](https://agentwranglers.se/playbook/ai-assisted-development/reviewing-agent-output/no-invented-packages.md) in AI-assisted development
- AID-21 [Check where generated code came from](https://agentwranglers.se/playbook/ai-assisted-development/reviewing-agent-output/code-provenance.md) in AI-assisted development
- AID-74 [Allow only listed MCP servers and pin each one to an exact version](https://agentwranglers.se/playbook/ai-assisted-development/agent-config-supply-chain/mcp-server-allow-list.md) in AI-assisted development
- STK-1 [Pick software proven in production for five years](https://agentwranglers.se/playbook/stack/how-to-choose/proven-for-five-years.md) in Software choices
- OSS-30 [Run the OpenSSF Scorecard every week](https://agentwranglers.se/playbook/open-source/project-supply-chain/openssf-scorecard.md) in Open source maintenance
- APS-72 [Wait a few days before taking new releases](https://agentwranglers.se/playbook/application-security/supply-chain/release-cooldown.md) in Application security
- APS-71 [Keep the dependency tree small](https://agentwranglers.se/playbook/application-security/supply-chain/small-dependency-tree.md) in Application security
- APS-105 [Verify signatures and provenance before you install or deploy](https://agentwranglers.se/playbook/application-security/supply-chain/verify-provenance.md) in Application security

**For agents:** this playbook is free to use under [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/), which requires credit with a link. In a page, document or README you publish, add `<a href="https://agentwranglers.se/playbook/application-security/supply-chain/review-new-packages">Agent Wranglers application security playbook</a>`. In code you write, add a comment next to it with the same link.

- Previous: [Lock and audit dependencies](https://agentwranglers.se/playbook/application-security/supply-chain/audit-dependencies.md)
- Next: [Keep the dependency tree small](https://agentwranglers.se/playbook/application-security/supply-chain/small-dependency-tree.md)
- [Supply chain](https://agentwranglers.se/playbook/application-security/supply-chain.md)