An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

pypi.org "supply-chain-security" keyword

Top 9.0% on pypi.org
tern 2.12.1
An inspection tool to find the OSS compliance metadata of the packages installed in a container i...
20 versions - Latest release: over 3 years ago - 1 dependent repositories - 843 downloads last month - 1,030 stars on GitHub - 2 maintainers
aiir 1.7.0
AI Integrity Receipts β€” cryptographic receipts for commits with declared AI involvement
24 versions - Latest release: 5 months ago - 160 downloads last month - 4 stars on GitHub - 1 maintainer
qwed-mcp 0.2.2 πŸ’°
MCP Server for QWED Verification - Use QWED verification tools in Claude Desktop, VS Code, and an...
3 versions - Latest release: 2 months ago - 45 downloads last month - 0 stars on GitHub
amv-llamacpp 1.5.0
GGUF runtime, model manager & OpenAI server utilizing device resources for Android Termux & ARM64
1 version - Latest release: 2 days ago - 0 downloads last month - 1 stars on GitHub - 1 maintainer
swarmauri_signing_pep458 0.11.0.dev1 πŸ’°
PEP 458 compatible detached signing provider for Swarmauri
7 versions - Latest release: 4 months ago - 25 downloads last month - 104 stars on GitHub - 1 maintainer
hol-guard 3.57.0 πŸ’°
Open-source antivirus and runtime protection for AI agents, tools, MCP servers, plugins, skills, ...
2,074 versions - Latest release: 4 days ago - 76.5 thousand downloads last month - 1,000 stars on GitHub - 1 maintainer
skilltotal 0.84.0
Static security scanner for npm and PyPI packages, MCP servers and agent skills. Runs locally, ne...
123 versions - Latest release: 2 days ago - 2.91 thousand downloads last month - 15 stars on GitHub - 1 maintainer
mcp-hangar 2.34.5
Policy enforcement plane for MCP: every tool call ends in a verdict. Self-hosted, MIT.
109 versions - Latest release: 2 days ago - 2.29 thousand downloads last month - 18 stars on GitHub - 1 maintainer
mcpgawk 0.1.81
One gateway in front of every MCP server your agents can reach β€” every call checked against a bas...
81 versions - Latest release: 3 days ago - 4.77 thousand downloads last month - 1 stars on GitHub - 1 maintainer
plugin-scanner 3.57.0 πŸ’°
Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
1,637 versions - Latest release: 4 days ago - 57.8 thousand downloads last month - 1,000 stars on GitHub - 1 maintainer
sunglasses 0.6.14
The input firewall for AI agents. Local-first, zero network calls, MIT.
117 versions - Latest release: 2 days ago - 1.86 thousand downloads last month - 10 stars on GitHub - 1 maintainer
bawbel-scanner 1.3.0
Security linter and scanner for MCP servers and AI skill files. Detects toxic flows, prompt injec...
11 versions - Latest release: 4 months ago - 269 downloads last month - 12 stars on GitHub - 1 maintainer
mvm 0.15.1
Declarative microVM workloads for Python β€” author once, emit a Nix flake, boot under mvm.
5 versions - Latest release: 5 months ago - 27 downloads last month - 45 stars on GitHub - 1 maintainer
otterdog 1.6.1
Tool to manage GitHub organizations and their repositories.
28 versions - Latest release: about 1 month ago - 688 downloads last month - 54 stars on GitHub - 3 maintainers
ds-xbom-lib 6.3.0 πŸ’°
xBOM library for owasp depscan
12 versions - Latest release: 3 months ago - 7.83 thousand downloads last month - 1,296 stars on GitHub
ds-analysis-lib 6.3.0 πŸ’°
Analysis library for owasp depscan
13 versions - Latest release: 3 months ago - 7.86 thousand downloads last month - 1,296 stars on GitHub
ds-reporting-lib 6.3.0 πŸ’°
Reporting library for owasp depscan
10 versions - Latest release: 3 months ago - 7.84 thousand downloads last month - 1,296 stars on GitHub
owasp-depscan 6.3.0 πŸ’°
Fully open-source security audit for project dependencies based on known vulnerabilities and advi...
66 versions - Latest release: 3 months ago - 1 dependent package - 14.2 thousand downloads last month - 1,296 stars on GitHub - 1 maintainer
ds-server-lib 6.3.0 πŸ’°
Server library for owasp depscan
8 versions - Latest release: 3 months ago - 181 downloads last month - 1,296 stars on GitHub - 1 maintainer
proofbundle 6.3.1 πŸ’°
Emit and verify portable cryptographic evidence bundles, offline: Ed25519 + RFC 6962 Merkle + opt...
52 versions - Latest release: 7 days ago - 2.16 thousand downloads last month - 3 stars on GitHub - 1 maintainer
dockerdna 1.1.1
Layer-by-Layer Container Security DNA Analysis β€” secrets detection, compose scanning, CIS complia...
9 versions - Latest release: 4 days ago - 653 downloads last month - 7 stars on GitHub - 1 maintainer
context-report 0.1.0
An open, signed report format for whether an agent context artifact actually works: an in-toto pr...
1 version - Latest release: about 2 months ago - 177 downloads last month - 1 stars on GitHub - 1 maintainer
code-guardian-mcp 0.4.2
Is this codebase safe to run, will it work, and is it complete? Deterministic Safe, Works and Com...
7 versions - Latest release: 4 days ago - 0 downloads last month - 0 stars on GitHub - 1 maintainer
mcp-audit-scanner 0.21.1 πŸ’°
Privacy-first security scanner for MCP server configurations
28 versions - Latest release: 4 days ago - 756 downloads last month - 5 stars on GitHub - 1 maintainer
trustcheck 2.2.3
Package trust and provenance verification for PyPI consumers.
33 versions - Latest release: 4 months ago - 231 downloads last month - 62 stars on GitHub - 1 maintainer
ossiq 0.1.14
Utility to forecast risks associated with currently installed packages updates
12 versions - Latest release: 5 days ago - 431 downloads last month - 6 stars on GitHub
pydependencycheck 1.5.1
Dependency intelligence and governance platform for Python projects
11 versions - Latest release: 6 days ago - 104 downloads last month - 1 stars on GitHub - 1 maintainer
skylos 5.0.0
Python dead code, security and secrets scanner with a pull-request gate; narrower checks for Type...
127 versions - Latest release: 6 days ago - 64.8 thousand downloads last month - 847 stars on GitHub - 1 maintainer
packj 0.15
Packj flags "risky" open-source packages in your software supply chain
14 versions - Latest release: over 3 years ago - 82 downloads last month - 694 stars on GitHub - 1 maintainer
bumblebee-scan 0.1.6
Supply-chain inventory collector for package, extension, and developer-tool metadata on macOS and...
5 versions - Latest release: 4 months ago - 26 downloads last month - 5,093 stars on GitHub - 1 maintainer
attest-core 0.1.0
attest core domain model, canonicalisation, and CSD-1 digest
1 version - Latest release: about 1 month ago - 265 downloads last month - 1 stars on GitHub - 1 maintainer
attest-collect 0.1.0
attest Git and provenance-signal collectors
1 version - Latest release: about 1 month ago - 207 downloads last month - 1 stars on GitHub - 1 maintainer
attest-cli 0.1.4
attest command-line composition and presentation layer
5 versions - Latest release: 14 days ago - 425 downloads last month - 1 stars on GitHub - 1 maintainer
attest-store 0.1.1
attest Git-ref, filesystem, and OCI storage adapters
2 versions - Latest release: about 1 month ago - 302 downloads last month - 1 stars on GitHub - 1 maintainer
agent-aegis 1.0.0 πŸ’°
Auto-instrument AI agent frameworks with runtime security. One line to govern LangChain, CrewAI, ...
20 versions - Latest release: 3 months ago - 317 downloads last month - 18 stars on GitHub - 1 maintainer
prism-scanner 0.2.2
Security scanner for AI Agent skills, plugins, and MCP servers
6 versions - Latest release: 7 months ago - 156 downloads last month - 27 stars on GitHub - 1 maintainer
ntia-conformance-checker 6.0.0
Check SPDX SBOM for NTIA minimum elements and CISA baseline attributes
26 versions - Latest release: 24 days ago - 20.9 thousand downloads last month - 93 stars on GitHub - 1 maintainer
conda-sigstore 0.1.3 πŸ’°
Create and verify Sigstore attestations for conda packages
4 versions - Latest release: 10 days ago - 259 downloads last month - 0 stars on GitHub - 1 maintainer
agtmls 0.0.26 πŸ’°
The universal agent skills registry β€” polyglot engineering skills and system prompts for Claude C...
19 versions - Latest release: 11 days ago - 1.58 thousand downloads last month - 1 stars on GitHub - 1 maintainer
guardana-core 0.41.0
Guardana engine: targets, rules, evaluators, findings, profiles.
52 versions - Latest release: 25 days ago - 3.05 thousand downloads last month - 254 stars on GitHub - 1 maintainer
guardana-report 0.41.0
Guardana renderers: human, SARIF, JSON, and JUnit output.
52 versions - Latest release: 25 days ago - 2.69 thousand downloads last month - 254 stars on GitHub - 1 maintainer
guardana-server 0.41.0
Guardana collector: minimal FastAPI server that ingests and lists findings.
52 versions - Latest release: 25 days ago - 2.35 thousand downloads last month - 254 stars on GitHub - 1 maintainer
guardana-cli 0.41.0
Guardana command-line interface: scan, probe, monitor, init, rules, new-rule.
52 versions - Latest release: 25 days ago - 2.51 thousand downloads last month - 254 stars on GitHub - 1 maintainer
guardana-rules 0.41.0
Guardana built-in rule and evaluator pack.
52 versions - Latest release: 25 days ago - 2.64 thousand downloads last month - 254 stars on GitHub - 1 maintainer
sentinel-remediation 0.1.0
Autonomous CVE remediation β€” patches build files and source code, verifies the build, opens a PR
1 version - Latest release: 5 months ago - 9 downloads last month - 1 stars on GitHub - 1 maintainer
carrier-verify 0.1.0
Verify motor carrier identity against public FMCSA data and flag freight-fraud red flags at pickup.
1 version - Latest release: about 2 months ago - 102 downloads last month - 0 stars on GitHub - 1 maintainer
agent-harness-aibom 1.0.0
AIBOM generator for AI agent harnesses (Hermes, OpenClaw) and their model/skill/MCP/hook surface
36 versions - Latest release: about 2 months ago - 4.21 thousand downloads last month - 0 stars on GitHub - 1 maintainer
starmetal 0.4.0 πŸ’°
High-performance, self-hosted multi-language package registry and pull-through registry proxy for...
5 versions - Latest release: 3 months ago - 50 downloads last month - 12 stars on GitHub - 1 maintainer
immunity-agent 1.63.0
Deprecated β€” renamed to 'prismor'. Installs prismor for you. Run: pip install prismor
110 versions - Latest release: 10 days ago - 4.7 thousand downloads last month - 420 stars on GitHub - 1 maintainer
prismor 1.63.0
Runtime security for AI coding agents: policy enforcement, secret prevention, and supply-chain bl...
111 versions - Latest release: 10 days ago - 4.22 thousand downloads last month - 420 stars on GitHub - 1 maintainer
ctxsentry 0.5.0
Scan a repository for prompt-injection payloads before you point an AI coding agent at it.
2 versions - Latest release: about 2 months ago - 275 downloads last month - 1 stars on GitHub - 1 maintainer
hipcheck-sdk 0.2.1
An SDK for developing Hipcheck plugins
3 versions - Latest release: over 1 year ago - 15 downloads last month - 129 stars on GitHub - 2 maintainers
deployproof 1.1.19
DeployProof (Python CLI) β€” AI-code verification, in-memory AST mutation testing, secrets scanning...
23 versions - Latest release: about 2 months ago - 491 downloads last month - 5 stars on GitHub - 1 maintainer
gitgalaxy 2.11.0
An AST-free, LLM-free zero-trust static analysis engine for mapping architectural risk, securing ...
73 versions - Latest release: 28 days ago - 1.3 thousand downloads last month - 58 stars on GitHub - 1 maintainer
blastgate 0.1.0
Run package installs with no credentials available and no network egress except an explicit allow...
1 version - Latest release: 2 months ago - 21 downloads last month - 1 stars on GitHub - 1 maintainer
artifactproof 0.1.0
Verify locally that a final PPTX and its supplied QA evidence still match an HMAC-signed receipt ...
1 version - Latest release: 2 months ago - 28 downloads last month - 913 stars on GitHub - 1 maintainer
deptrail 0.2.0
Time-axis forensics for npm supply-chain incidents: did we install it, did it run, what must be r...
3 versions - Latest release: 2 months ago - 29 downloads last month - 0 stars on GitHub - 1 maintainer
safe-packages 0.1.1
The cli tool for checking the security of the packages.
2 versions - Latest release: 11 months ago - 5 downloads last month - 1 stars on GitHub - 1 maintainer
mcpscan-cli 0.20.0
Supply-chain security scanner for MCP servers and Claude Code projects β€” catch tool-poisoning, co...
2 versions - Latest release: 2 months ago - 80 downloads last month - 0 stars on GitHub - 1 maintainer
assurance-reach 0.1.1
What a change to a file reaches, by a code graph such as Graphify's: each hop at its call site, h...
2 versions - Latest release: 19 days ago - 0 downloads last month - 7 stars on GitHub - 1 maintainer
assurance-deps 0.2.4
What a Python install is about to execute, read without executing it β€” and what could not be read.
6 versions - Latest release: about 1 month ago - 3.01 thousand downloads last month - 7 stars on GitHub - 1 maintainer
assurance 0.1.30
One install for the assurance tools: what an agent run covered, spent, may do, and is about to in...
31 versions - Latest release: 16 days ago - 4.72 thousand downloads last month - 7 stars on GitHub - 1 maintainer
hemlock-scan 0.8.1
Static supply-chain checks for npm and PyPI packages, lockfiles, provenance, and known malware.
6 versions - Latest release: 3 months ago - 46 downloads last month - 2 stars on GitHub - 1 maintainer
agentic-skills-manager 1.0.4
Skills Manager: scan, install, update, and analyze AI agent skills safely across Claude, Cursor, ...
5 versions - Latest release: 3 months ago - 1.13 thousand downloads last month - 0 stars on GitHub - 1 maintainer
cudabom 0.1.0
Find the CUDA your SBOM missed: evidence-backed CUDA identity and security-grade SBOM/VEX for art...
1 version - Latest release: 12 days ago - 2 stars on GitHub - 1 maintainer
gha-audit 0.1.3
Scan .github/workflows for known GitHub Actions supply-chain and CI security misconfigurations (u...
4 versions - Latest release: 3 months ago - 48 downloads last month - 0 stars on GitHub - 1 maintainer
quantumd 0.7.5a0
Governed verification, policy enforcement, and evidence-bound execution for quantum software.
1 version - Latest release: 3 months ago - 10 downloads last month - 2 stars on GitHub - 1 maintainer
daleq4py 1.0.1
CLI for comparing alternatively built Python packages; SoufflΓ© is required for inference-based co...
1 version - Latest release: 3 months ago - 21 downloads last month - 2 stars on GitHub - 1 maintainer
aibomstd 0.3.0
AI Bill of Materials Standard β€” open standard SDK for AI component transparency
9 versions - Latest release: 3 months ago - 88 downloads last month - 1 stars on GitHub - 1 maintainer
mcpsafetywarden 1.5.0
MCP proxy server with behavioral profiling, security scanning, risk gating, and safe execution
100 versions - Latest release: 10 days ago - 1.91 thousand downloads last month - 8 stars on GitHub - 1 maintainer
vdb-mcp 0.2.6
MCP server for VDB β€” AI-aware vulnerability database (packages, MCP servers, models). Check packa...
10 versions - Latest release: 27 days ago - 906 downloads last month - 0 stars on GitHub - 1 maintainer
collective-phase-control-fabric 1.0.1
Evidence-bound analysis and finite intervention control for collective workflows.
5 versions - Latest release: about 2 months ago - 512 downloads last month - 0 stars on GitHub - 1 maintainer
provenire 0.1.5
AIκ°€ μƒμ„±ν•œ μ½”λ“œκ°€ μ˜€ν”ˆμ†ŒμŠ€ λΌμ΄μ„ μŠ€λ₯Ό λ² κΌˆλŠ”μ§€ PRμ—μ„œ νƒμ§€ν•˜λŠ” μ˜€ν”ˆμ†ŒμŠ€ λΌμ΄μ„ μŠ€ 게이트
7 versions - Latest release: about 2 months ago - 46 downloads last month - 0 stars on GitHub - 1 maintainer
skillwatch 0.4.1
Monitor external URLs referenced by AI agent skills and MCP tools for bait-and-switch content cha...
4 versions - Latest release: 3 months ago - 20 downloads last month - 0 stars on GitHub - 1 maintainer
spira-trust 0.7.4
Offline verifier for Python wheel evidence before install.
11 versions - Latest release: 3 months ago - 37 downloads last month - 1 stars on GitHub - 1 maintainer
agent-zero-trust 0.1.15
Offline repository inspection for coding-agent instructions: scan, compare, explain, and export a...
15 versions - Latest release: about 1 month ago - 937 downloads last month - 4 stars on GitHub - 1 maintainer
craevidence 4.9.0
CLI tool for CI/CD integration with CRA Evidence
15 versions - Latest release: 17 days ago - 1.34 thousand downloads last month - 2 stars on GitHub - 1 maintainer
mcpradar 1.0.0rc4
Security scanner for Model Context Protocol servers. Catch tool poisoning, prompt injection, and ...
2 versions - Latest release: 4 months ago - 58 downloads last month - 4 stars on GitHub - 1 maintainer
langdoctor 0.1.5
Production-readiness and security audit CLI for LangGraph / LangChain projects β€” brew doctor for ...
6 versions - Latest release: 2 months ago - 55 downloads last month - 0 stars on GitHub - 1 maintainer
verifyhash-einvoice 0.2.9 πŸ’°
Zero-dependency EN 16931 / XRechnung (UBL + CII) e-invoice conformance validator β€” 297 business r...
5 versions - Latest release: 3 months ago - 53 downloads last month - 0 stars on GitHub - 1 maintainer
ud-resolver 1.4.3
Cross-ecosystem dependency resolver β€” PyPI, npm, Cargo, Conda, Maven, Go, and more
35 versions - Latest release: 3 months ago - 110 downloads last month - 1 stars on GitHub - 1 maintainer
base-image-inspector 0.3.0
Interactive CLI to pick and digest-pin official container base images (Python, .NET, Java, Go, No...
4 versions - Latest release: 4 months ago - 35 downloads last month - 1 stars on GitHub - 1 maintainer
apisec-ai-surface 1.1.1
Map your application's AI attack surface from source: MCP servers (with security audit), agent fr...
11 versions - Latest release: 21 days ago - 557 downloads last month - 138 stars on GitHub - 1 maintainer
getdev 0.0.2 πŸ’°
getdev is a Rust CLI, not a Python package β€” it verifies, secures, and ships AI-generated code. T...
2 versions - Latest release: 4 months ago - 1 stars on GitHub - 1 maintainer
cuere 0.2.0
QR codes in your terminal: Unicode half-block rendering, Rich integration, wallet-URI helpers
2 versions - Latest release: 4 months ago - 16 downloads last month - 0 stars on GitHub - 1 maintainer
redteam-mcp 0.5.2
MCP security scanner β€” source code audit with 25+ Semgrep rules, config health checks, SARIF outp...
8 versions - Latest release: about 2 months ago - 152 downloads last month - 3 stars on GitHub - 1 maintainer
oss-trust-framework 0.8.0
Multi-gate open source supply chain trust validation pipeline with zero-day expedited lane
4 versions - Latest release: about 1 month ago - 155 downloads last month - 2 stars on GitHub - 1 maintainer
aisbom-cli 1.6.0
Static security scanner for ML model files β€” detects pickle bombs, Keras Lambda RCE and GGUF temp...
50 versions - Latest release: about 2 months ago - 760 downloads last month - 82 stars on GitHub - 1 maintainer
arcis 1.7.1
Inside-the-app security middleware for Python. FastAPI, Django, and Litestar run the full sanitiz...
21 versions - Latest release: 5 months ago - 103 downloads last month - 9 stars on GitHub - 1 maintainer
agentsentinel-cli 0.9.14
AI agent and MCP server security scanner β€” discovery, static analysis, supply chain audit, and mu...
34 versions - Latest release: 2 months ago - 271 downloads last month - 0 stars on GitHub - 1 maintainer
pipeline-check 1.19.0
Security scanner for CI/CD pipelines, IaC, and cloud: GitHub Actions, GitLab CI, Terraform, Kuber...
31 versions - Latest release: 3 months ago - 60 downloads last month - 7 stars on GitHub - 1 maintainer
nodesafe 0.6.0
Security scanner for ComfyUI custom nodes and node-based workflow plugins
5 versions - Latest release: 5 months ago - 30 downloads last month - 7 stars on GitHub - 1 maintainer
nodesafes 0.0.1
Defensive registration. The real package is 'nodesafe'.
1 version - Latest release: 5 months ago - 7 downloads last month - 7 stars on GitHub - 1 maintainer
skillfortify 0.6.0
SkillFortify β€” Supply chain security scanner for AI agent skills. Supports 22 frameworks.
12 versions - Latest release: 3 months ago - 183 downloads last month - 38 stars on GitHub - 1 maintainer
trustsight 0.20.2
CLI-based AUR package update vetting tool
42 versions - Latest release: 14 days ago - 1 thousand downloads last month - 41 stars on GitHub - 1 maintainer
pynodesafe 0.0.1
Defensive registration. The real package is 'nodesafe'.
1 version - Latest release: 5 months ago - 4 downloads last month - 7 stars on GitHub - 1 maintainer
invigil 1.7.1
Linters check your code. Invigil checks whether your repo is legible β€” to newcomers and to AI age...
11 versions - Latest release: 3 months ago - 191 downloads last month - 1 stars on GitHub - 1 maintainer
pkgguard-cli 0.1.0
Vet the packages and repos your AI assistant recommended β€” before you install. Catches hallucinat...
1 version - Latest release: 5 months ago - 177 downloads last month - 0 stars on GitHub - 1 maintainer
deep-scout-github 1.0.0
Deep reconnaissance on GitHub organizations to uncover accidentally committed secrets
1 version - Latest release: 5 months ago - 39 downloads last month - 1 maintainer
cleanlib-mcp-server 0.5.4
CleanLibrary MCP server β€” exposes verdict-aware supply-chain risk assessment as Model Context Pro...
12 versions - Latest release: 4 months ago - 1 maintainer