Issues

• scan prints "No risks found" and exits 0 when the package download fails (npm + PyPI)

  DataDog/guarddog#906 · Filter by author SanGioSports opened on Oct 17, 2026
  1

• Precision regressions in GuardDog 3.2.0: 25 fixed-version npm/PyPI cases

  DataDog/guarddog#905 · Filter by author Megarushing opened on Oct 12, 2026

• False positives on Emscripten runtime and the Brotli dictionary (pdfjs-dist)

  DataDog/guarddog#903 · Filter by author dodjango opened on Oct 9, 2026

• Typosquatting heuristic: measured false positives on popular npm and PyPI packages (and two small bugs in PyPI confused forms)

  DataDog/guarddog#898 · Filter by author presendapp opened on Oct 5, 2026

• Per-rule path exclusions allow JavaScript detection evasion; please provide an override

  DataDog/guarddog#880 · Filter by author Luc45 opened on Sep 9, 2026

• False positive for threat.process.spawn

  ecosystem/npmfalse-positive
  DataDog/guarddog#869 · Filter by author christophetd opened on Aug 26, 2026

• False positive for threat.runtime.obfuscation.base64exec

  ecosystem/npmfalse-positive
  DataDog/guarddog#868 · Filter by author christophetd opened on Aug 26, 2026

• npm verify silently returns [] when given package-lock.json instead of erroring

  DataDog/guarddog#863 · Filter by author mai1x9 opened on Aug 20, 2026
  1

• "threat.metadata.provenance-regression" uses incorrect previous version for comparison

  bugecosystem/npm
  DataDog/guarddog#853 · Filter by author christophetd opened on Aug 14, 2026
  1

• Sandboxed extraction fails on some Linux hosts: _Py_HashRandomization_Init: failed to get random numbers

  bug
  DataDog/guarddog#848 · Filter by author superbiche opened on Aug 12, 2026
  2

• Fix unclear error message on npm scan

  ecosystem/npmenhancementgood first issue
  DataDog/guarddog#846 · Filter by author christophetd opened on Aug 12, 2026
  1

• Document JSON output and provide a JSON spec

  DataDog/guarddog#834 · Filter by author christophetd opened on Jul 31, 2026

• Triple-quote parity heuristic in _is_in_multiline_comment suppresses YARA matches (false negatives)

  DataDog/guarddog#831 · Filter by author arpitjain099 opened on Jul 29, 2026

• Improve roadmap visibility and contribution guide

  documentation
  DataDog/guarddog#813 · Filter by author christophetd opened on Jul 13, 2026

• Support scanning pyproject.toml dependency files

  enhancement
  DataDog/guarddog#781 · Filter by author christophetd opened on Jun 19, 2026

• Please add support for extra index urls

  ecosystem/npmecosystem/pypienhancement
  DataDog/guarddog#367 · Filter by author Whoaa512 opened on May 24, 2024
  3

• New heuristic to identify Python script written to disk and executed

  ecosystem/pypikind/heuristic
  DataDog/guarddog#205 · Filter by author christophetd opened on Mar 20, 2023

• Support SARIF output in "scan" commands

  enhancement
  DataDog/guarddog#197 · Filter by author christophetd opened on Mar 8, 2023
  1