Shared cache
Speed up checks for public packages with a signed shared verdict service. Private names never leave your machine.
Optional. Speeds up checks for public packages by consulting a shared verdict service.
$ export DEPWALL_CLOUD_URL=https://api.depwall.com
$ export DEPWALL_CLOUD_PUBKEY=<public key>
Only public package coordinates — ecosystem, name, version — are sent. Your code, files and private package names never leave your machine. With a key pinned, every cloud verdict is signature-verified; anything forged, unsigned, stale or future-dated is rejected and DepWall falls back to a full local check.