NetRise adds package trust tools to Provenance platform
Fri, 31st Jul 2026 (Today)
NetRise has added package trust enforcement tools to its Provenance product for developers using the command line, Visual Studio Code and AI coding assistants. The tools are intended to block malicious or policy-violating open source packages before they enter software projects.
The update introduces three mechanisms to apply package trust decisions earlier in the development process: a Package Firewall command-line tool, a Visual Studio Code extension and plugins for AI coding assistants including Claude Code, Gemini and Codex.
Development controls
The tools are designed to stop developers or automated assistants from installing software packages that violate an organisation's policy or appear malicious. The same policy engine is used across the editor, command line, AI assistants and continuous integration workflows.
The Visual Studio Code extension checks dependency manifests as developers edit them. It flags problematic packages inside the editor, provides plain-language explanations, offers one-click remediation and lets developers record policy exceptions.
The Package Firewall applies those decisions at the point of installation, blocking packages before they are downloaded to a machine or added to a build process.
Support at launch covers the Python package ecosystem through PyPI. Support for additional ecosystems is planned.
Supply chain
NetRise framed the release around a familiar pattern in software supply chain attacks: a compromised package remains publicly available long enough to be pulled into multiple projects before it is detected and removed. It cited the recent LiteLLM and Axios compromises as examples where exposure windows were short but still long enough for affected code to spread.
Michael Scott, Co-Founder and Chief Technology Officer, NetRise, said the risk lies in the period before public advisories are issued.
"The problem is everything that happens while it's still up," said Scott.
"Builds run, releases go out, containers deploy, all automatically. AI tools pull dependencies into projects for people who aren't even developers. By the time an advisory is published and the package is quarantined, the compromised version has already spread," added Scott.
That focus reflects a broader shift among security teams toward stopping suspect components at the point of introduction rather than relying only on later scanning and response. By applying the same trust decision across development and build environments, NetRise is trying to reduce inconsistencies between what a developer sees and what a pipeline later permits.
NetRise said the package checks now extend from dependency authoring through to software delivery. It also linked the developer workflow additions to its broader software supply chain monitoring approach, which includes analysis of software in production.
Acquisition plans
Thomas Pace, Co-Founder and Chief Executive Officer, NetRise, said the issue goes beyond a single class of package attack.
"The oldest problem in cybersecurity isn't malicious code-it's trusting software before you know where it came from or whether it deserves that trust," said Thomas Pace, Co-Founder and Chief Executive Officer, NetRise.
"Malicious packages are just the latest example of a much older problem: organizations continue to rely on software and components they haven't truly validated. That model has to end. Software should prove its origin, integrity and lineage before it ever runs, and when something does slip through, you should immediately understand where it came from and everywhere it exists. With Provenance integrated into the developer workflow and Turbine continuously validating software in production, that becomes the foundation of how software is built and trusted," added Pace.
NetRise operates in the software supply chain security market, where vendors are trying to help customers track software components across development, build and deployment environments. The company said organisations, including government agencies, use its tools to identify hidden dependencies, secrets, misconfigurations and other risks that source-based tools and software bills of materials may miss.
Separately, NetRise said it has entered into an agreement to be acquired by Accenture and would operate under Dragos after the transaction closes.