Skip to main content
We are excited to introduce the latest features and enhancements in Endor Labs.

​
Allow safe versions in Package Firewall

New You can now configure Package Firewall to install a safe version automatically instead of blocking the request, when a package is flagged for malware or doesn’t meet the minimum package age. Select Allow safe versions only (curate) for these conditions so the package manager resolves and installs a safe version instead of failing — developers get a working install without seeing a block. This action is available for the npm and PyPI ecosystems. For more information, see Allow safe versions.

​
Block Azure DevOps merges on PR scan findings

Enhancement You can now block pull requests from merging in Azure DevOps when a PR scan detects findings that match an action policy. Configure an action policy that breaks the build to choose which findings gate a merge, and an Azure DevOps branch policy that requires the Endor Labs status check. This ensures that the findings your action policy targets are resolved before code reaches your default branch. For more information, see Block pull requests on findings.

​
OpenCode support for the MCP server

Enhancement The Endor Labs MCP server now supports OpenCode, so you can scan dependencies, detect vulnerabilities, find leaked secrets, and review code for security issues directly inside OpenCode. For more information, see Endor Labs MCP server in OpenCode.