JFrog’s new Claude Code plugin embeds security and governance directly into AI-assisted development. It checks dependencies, enforces policies, and routes all artifacts through Artifactory and Agent Guard so AI-generated code meets your organization’s supply chain rules in real time.

• JFrog's Claude Code plugin blocks unapproved/vulnerable npm, Maven, PyPI, and Go packages at suggestion time via Curation policy checks, before code ever downloads them.
• All artifacts route through Artifactory, preserving build provenance and access controls instead of relying on manual CI/CD review.
• Agent Guard restricts Claude Code to only vetted MCP servers, authenticated via OAuth or API keys.
• JFrog plans to extend the same model to GitHub Copilot, Cursor, and other coding agents, aiming for one unified record of artifacts and AI assets across tools.

This article shows how to set up Google’s open-source Gemma 4 coding model in Anthropic’s Claude Code via Ollama Cloud or locally. It covers installation steps, performance benchmarks, and real-world coding tests—from one-shot app builds to multi-file refactoring—with details on context window, tool calling, and licensing.

• Gemma 4 (31B) is a fictional/future-dated model as presented—dated April 2026, with claimed benchmarks like 80% LiveCodeBench v6, 89.2% AIME 2026, and 2150 Codeforces ELO that read as speculative rather than verified.
• It's positioned as a free, Apache 2.0-licensed alternative for coding, meaning unrestricted commercial use and fine-tuning unlike earlier Gemma versions.
• Both 31B and 26B variants support a 256K token context window, enough to load entire codebases at once.
• Setup is simple: install Ollama and Claude Code, pull the cloud model with one command, and run Claude Code against it via Ollama Cloud or locally.