'\" t
.nh
.TH "glab" "1" "Oct 2026" "Auto generated by spf13/cobra" ""

.SH NAME
glab-dependency-firewall-package - Check a package against the GitLab Dependency Firewall. (EXPERIMENTAL)


.SH SYNOPSIS
\fBglab dependency-firewall package  [flags]\fP


.SH DESCRIPTION
Check a single package coordinate against the GitLab Dependency Firewall policy for the current project and report the outcome (allow, warning, blocked). No package manager binary is required.

.PP
Supported package URL (PURL) types are \fBnpm\fR, \fBpypi\fR, \fBmaven\fR, and \fBgem\fR\&. The PURL must include a version, for example \fBpkg:npm/left-pad@1.3.0\fR\&.

.PP
This command does not write to the CI log at \fB\&.gitlab/df/ci-log.json\fR, so \fBglab dependency-firewall ci-summary\fR does not include its result.

.PP
Exit codes:

.TS
allbox;
l l 
l l .
\fBExit code\fP	\fBMeaning\fP
\fB0\fR	Allow or warning.
\fB1\fR	T{
Misconfiguration or transport error.
T}
\fB3\fR	Blocked.
.TE

.PP
This feature is an experiment and is not ready for production use.
It might be unstable or removed at any time.
For more information, see
https://docs.gitlab.com/policy/development_stages_support/.


.SH OPTIONS INHERITED FROM PARENT COMMANDS
\fB-h\fP, \fB--help\fP[=false]
	Show help for this command.


.SH EXAMPLE
.EX
# Check an npm package version
glab dependency-firewall package pkg:npm/left-pad@1.3.0

# Check a PyPI package version
glab dependency-firewall package pkg:pypi/requests@2.31.0

# Check a Maven package version
glab dependency-firewall package pkg:maven/org.slf4j/slf4j-api@2.0.13

# Check a RubyGems package version
glab dependency-firewall package pkg:gem/rails@7.1.3

.EE


.SH SEE ALSO
\fBglab-dependency-firewall(1)\fP