prefer-package-manager

━━ when it runs

• PreToolUsebefore the tool call runs. a denial here means the command never executes at all.

watchesnarrowed to the Bash tool

this pack enforces: a match returns a real denial rather than being recorded and discarded. what the denial then does depends on the event above.

━━ parameters

these are the publisher's declared defaults, and a pack policy runs on them. values saved from the dashboard are stored under the bare policy name and are not currently read back for pack policies.

• allowedstring[]default []

  Allowed package manager names (e.g. ['uv', 'bun']). Any detected manager not in this list is blocked.

• blockedstring[]default []

  Additional manager names to block beyond the built-in list (e.g. ['pdm', 'pipx']).

━━ install

this one is opt-in. taking the pack without flags leaves it off until you tick it, so install it by name if you want only this.

• just this policy$failproofai policies add FailproofAI/policies --policy prefer-package-manager⧉ copy
• the whole pack$failproofai policies add FailproofAI/policies⧉ copy
• turn just this off$failproofai policies remove prefer-package-manager⧉ copy
• pick from a list$failproofai policies add⧉ copy
• uninstall the pack$failproofai policies remove FailproofAI/policies⧉ copy

ships in FailproofAI/policies · v2.0.0 · source ↗

━━ also in packages & system

• warn-package-publishWarn before publishing packages to public registries (npm, PyPI, crates.io, RubyGems, etc.)
• warn-global-package-installWarns before installing packages globally (npm -g, cargo install, etc.)
• warn-large-file-writeWarn before writing files larger than 1MB (configurable via thresholdKb param)
• warn-background-processWarns before starting detached or background processes