Ecosyste.ms: Packages

An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

pypi.org "supply-chain-security" keyword

otterdog 0.6.0
Tool to manage GitHub organizations and their repositories.
6 versions - Latest release: 27 days ago - 94 downloads last month - 9 stars on GitHub - 2 maintainers
blint 2.1.4
Linter and SBOM generator for binary files.
56 versions - Latest release: 16 days ago - 3 dependent repositories - 2.9 thousand downloads last month - 272 stars on GitHub - 1 maintainer
owasp-depscan 5.3.4 💰
Fully open-source security audit for project dependencies based on known vulnerabilities and advi...
43 versions - Latest release: 19 days ago - 1 dependent package - 1.52 thousand downloads last month - 645 stars on GitHub - 1 maintainer
Top 5.2% on pypi.org
appthreat-depscan 4.2.3 💰
Fully open-source security audit for project dependencies based on known vulnerabilities and advi...
123 versions - Latest release: 9 months ago - 6 dependent repositories - 2.94 thousand downloads last month - 713 stars on GitHub - 1 maintainer
packj 0.15
Packj flags "risky" open-source packages in your software supply chain
14 versions - Latest release: over 1 year ago - 11 downloads last month - 611 stars on GitHub - 1 maintainer
Top 9.0% on pypi.org
tern 2.12.1
An inspection tool to find the OSS compliance metadata of the packages installed in a container i...
20 versions - Latest release: 10 months ago - 1 dependent repositories - 1.42 thousand downloads last month - 931 stars on GitHub - 2 maintainers