slowshield.org valid

SlowShield

SlowShield is a free, open-source, self-hosted proxy for PyPI, npm, Go modules, Maven (Maven, Gradle, sbt), crates.io, NuGet and container images (Docker Hub, GHCR, Quay, registry.k8s.io and others). It holds new releases back for a few days (7 by default), refuses known malware from the OSV and GitHub advisory feeds, and checks every download against the registry's digest and the fingerprint it recorded the first time.

Their llms.txt

The beginning of the file, from our validated copy saved 2026-10-24T13:04:01.039Z. Cached copy · Source on slowshield.org

# SlowShield

> SlowShield is a free, open-source, self-hosted proxy for PyPI, npm, Go modules, Maven (Maven, Gradle, sbt), crates.io, NuGet and container images (Docker Hub, GHCR, Quay, registry.k8s.io and others). It holds new releases back for a few days (7 by default), refuses known malware from the OSV and GitHub advisory feeds, and checks every download against the registry's digest and the fingerprint it recorded the first time.

Package managers and container runtimes point at one SlowShield instance instead of the public registries; the instance's Setup page (`/ui/setup`) shows every setting with its address filled in. Each page below is Markdown; the guide's examples use `https://slowshield.example.com`.

For agents: if an install fails with `403` and "too new" (Maven and NuGet: `425 Too Early`), the version is younger than the delay: use the newest version that installs instead, and don't go around SlowShield. A `451` (container images: `403` with reason `blocked`) is known malware: don't install it or a look-alike. The Agents page has the details and an Agent Skill.

## Guide

- [Docs](https://slowshield.org/docs/index.md): How to point every package manager and container runtime at SlowShield, what changes for your builds, and how to check that nothing goes around it.
- [Python](https://slowshield.org/docs/python/index.md): Use SlowShield as the package index for pip, uv, Poetry, PDM and Pipenv: setup, what changes, the package managers' own release age, and Docker builds.
- [JavaScript](https://slowshield.org/docs/javascript/index.md): Use SlowShield as the npm registry for npm, pnpm, Yarn and Bun: setup, what changes, the package managers' own release age, and Docker builds.
- [Go](https://slowshield.org/docs/go/index.md): Use SlowShield as your GOPROXY: setup, what changes for go get and go.mod, the checksum database, and Docker builds.
- [Java](https://slowshield.org/docs/java/index.md): Use SlowShield as the Maven repository for Maven, Gradle, sbt and Coursier: setup, what changes, 425 Too Early, and Docker builds.
- [Rust](https://slowshield.org/docs/rust/index.md): Use SlowShield as Cargo's crates.io source: setup, held versions shown as yanked, Cargo.lock, and Docker builds.
- [C#](https://slowshield.org/docs/csharp/index.md): Use SlowShield as the NuGet source for dotnet: setup, held versions left out, NU1603, 425 Too Early, and Docker builds.
- [Container images](https://slowshield.org/docs/containers/index.md): Pull container images through SlowShield with containerd, Kubernetes, Docker, Docker Desktop, Podman and BuildKit: setup, tags that lag behind, refusals, and what can go around it.
- [Building images](https://slowshield.org/docs/container-builds/index.md): Build container images with Docker or Podman so that the base images and every dependency of the build come through SlowShield, and check that nothing goes around it.
- [Agents](https://slowshield.org/docs/agents/index.md): SlowShield for coding agents: what its a
…

Related sites

Explore similar publishers →

Similar publisher descriptions and documentation. Similarity does not imply affiliation or equivalent capabilities.

Machine-readable: GET /v1/resolve?q=slowshield.org · GET /v1/domain/slowshield.org · this page as Accept: application/json or text/markdown · MCP lookup_domain

Automatically discovered from public files. Inclusion does not imply endorsement or publisher participation.

Claim my listing on Agent Web Map for slowshield.org:
1. POST https://agentwebmap.com/v1/sites/slowshield.org/claims and keep claim_id and claim_secret private.
2. Publish the verification line "AgentWebMap verification: <token>" (token from step 1) in https://slowshield.org/llms.txt, or use the DNS, meta-tag or well-known method the response describes. This only verifies the listing; your website and domain remain yours.
3. POST https://agentwebmap.com/v1/sites/slowshield.org/verify with {"claim_id": "...", "claim_secret": "..."}.
4. Save the api_key from the answer; it manages the listing (PATCH https://agentwebmap.com/v1/sites/slowshield.org).
MCP equivalent: tools begin_ownership_claim, then verify_domain, at https://agentwebmap.com/mcp. Docs: https://agentwebmap.com/docs#verify

Corrections or removal requests: contact the directory.