Omnis Watchtower: a Claude Code plugin that vets packages before install

A developer released Omnis Watchtower, an open-source Claude Code plugin that intercepts npm and PyPI installs before they run, blocking invented names, typosquats and known malware. Fresh releases of popular packages are pinned to a version at least 72 hours old, while ambiguous cases go to a hidden Sentinel subagent.

• Parses npm, pnpm, yarn, bun, npx, pip, uv, poetry and pipx commands
• Of 1,000 popular packages: 998 passed, 59 pinned, 0 refused, 2 held
• Decisions take 1.06 s at the 95th percentile, instant from cache
• 20 of 20 Sentinel investigations returned a verdict in 43–116 seconds