Skip to main content

Official package

The canonical npm package is failproofai:

Why we own the alias names

Typosquatting is a common supply-chain attack where a malicious actor registers a package name that is one keystroke away from a popular package. Unsuspecting users who mistype the install command end up running attacker-controlled code with full system access - exactly the kind of threat Failproof AI is designed to defend against. To eliminate this surface, we pre-emptively own all common misspellings and formatting variants of failproofai on npm. None of these names can be registered by a third party. Each one is a thin proxy that installs and delegates to the real failproofai package.

Registered aliases

Formatting variants - different ways to write “failproof ai”: failprof* typos - missing one o from “proof”: faliproof* typos - transposed a and i:
Why pending? npm’s spam-prevention policy blocks names that normalize to the same string as an existing package after stripping punctuation and running similarity checks. We have contacted npm support to reserve these names for anti-squatting purposes. They will be activated once approved.
You can verify any published alias is owned by us:

How the aliases work

Each alias package:
  1. Lists failproofai as a dependency - so the real package (including its postinstall hook setup) runs on install
  2. Exposes a binary matching its own name (e.g. failprof-ai) that proxies all arguments to the failproofai binary
The proxy is a two-line Node script; there is no logic, no network calls, and no data collection beyond what failproofai itself does.

If you find a name we missed

Open an issue at failproofai/failproofai and we will register it.