Refuse

Category

Developer Tools

Launched

June 19, 2026

Pricing

freemium

Founder

Gokul

Website

refuse.dev

Refuse is an open source shim that sits in front of 21 package managers (npm, pip, cargo, gem, go, and more) and blocks known vulnerable package installs before they hit disk. It intercepts install commands at the shell level, checks the package version against a database of 362,000+ advisories, and refuses the install if a vulnerability is found — suggesting a safe version instead. It works whether you type the command, your coding agent runs it, or your CI pipeline executes it. Refuse can be used as a hosted SaaS (free up to 100k scans per 30 days) or self hosted via a single Docker container (Apache 2.0, no key required). The CLI installs shims that wrap each package manager, and a refuse fix command prints the suggested safe version for easy substitution.