An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

formulae.brew.sh "supply-chain-security" keyword

bomctl 0.4.3
Format-agnostic SBOM tooling for the stages between SBOM generation and analysis
1 version - Latest release: 4 months ago - 2 downloads last month - 156 stars on GitHub
sh4d0wup 0.11.1 💰
Signing-key abuse and update exploitation framework
7 versions - Latest release: 3 months ago - 6 downloads last month - 131 stars on GitHub
vet 1.20.0
Policy driven vetting of open source dependencies
61 versions - Latest release: 18 days ago - 45 downloads last month - 1,113 stars on GitHub
bumblebee 0.1.2
Read-only developer endpoint scanner for supply-chain exposure
2 versions - Latest release: 3 months ago - 7 downloads last month - 5,093 stars on GitHub
skillspector 2.13.1
Security scanner for AI agent skills
6 versions - Latest release: 4 days ago - 122 downloads last month - 20,855 stars on GitHub
poutine 1.1.6
Security scanner that detects vulnerabilities in build pipelines
20 versions - Latest release: 5 months ago - 13 downloads last month - 527 stars on GitHub
tern 2.12.1
Software Bill of Materials (SBOM) tool
2 versions - Latest release: over 3 years ago - 16 downloads last month - 1,030 stars on GitHub
chainloop-cli 1.126.0
CLI for interacting with Chainloop
192 versions - Latest release: 7 days ago - 156 downloads last month - 602 stars on GitHub
tirith 0.4.2 💰
Detect terminal injection, homograph, and pipe-to-shell attacks
3 versions - Latest release: 25 days ago - 527 downloads last month - 2,757 stars on GitHub
git-pkgs-proxy 0.9.1 💰
Lightweight caching proxy for package registries
6 versions - Latest release: 16 days ago - 11 downloads last month - 243 stars on GitHub
npq 3.27.2
Audit npm packages before you install them
21 versions - Latest release: 8 days ago - 141 downloads last month - 1,794 stars on GitHub
bagel 0.7.1
CLI to audit posture and evaluate compromise blast radius
6 versions - Latest release: 3 months ago - 6 downloads last month - 200 stars on GitHub
nono 0.78.0
Capability-based sandbox shell for AI agents with OS-enforced isolation
15 versions - Latest release: about 1 month ago - 478 downloads last month - 2,310 stars on GitHub