pypi.org "supply-chain-security" keyword
Top 9.0% on pypi.org
20 versions - Latest release: over 3 years ago - 1 dependent repositories - 843 downloads last month - 1,030 stars on GitHub - 2 maintainers
tern 2.12.1
An inspection tool to find the OSS compliance metadata of the packages installed in a container i...20 versions - Latest release: over 3 years ago - 1 dependent repositories - 843 downloads last month - 1,030 stars on GitHub - 2 maintainers
aiir 1.7.0
AI Integrity Receipts β cryptographic receipts for commits with declared AI involvement24 versions - Latest release: 5 months ago - 160 downloads last month - 4 stars on GitHub - 1 maintainer
qwed-mcp 0.2.2 π°
MCP Server for QWED Verification - Use QWED verification tools in Claude Desktop, VS Code, and an...3 versions - Latest release: 2 months ago - 45 downloads last month - 0 stars on GitHub
amv-llamacpp 1.5.0
GGUF runtime, model manager & OpenAI server utilizing device resources for Android Termux & ARM641 version - Latest release: 2 days ago - 0 downloads last month - 1 stars on GitHub - 1 maintainer
swarmauri_signing_pep458 0.11.0.dev1 π°
PEP 458 compatible detached signing provider for Swarmauri7 versions - Latest release: 4 months ago - 25 downloads last month - 104 stars on GitHub - 1 maintainer
hol-guard 3.57.0 π°
Open-source antivirus and runtime protection for AI agents, tools, MCP servers, plugins, skills, ...2,074 versions - Latest release: 4 days ago - 76.5 thousand downloads last month - 1,000 stars on GitHub - 1 maintainer
skilltotal 0.84.0
Static security scanner for npm and PyPI packages, MCP servers and agent skills. Runs locally, ne...123 versions - Latest release: 2 days ago - 2.91 thousand downloads last month - 15 stars on GitHub - 1 maintainer
mcp-hangar 2.34.5
Policy enforcement plane for MCP: every tool call ends in a verdict. Self-hosted, MIT.109 versions - Latest release: 2 days ago - 2.29 thousand downloads last month - 18 stars on GitHub - 1 maintainer
mcpgawk 0.1.81
One gateway in front of every MCP server your agents can reach β every call checked against a bas...81 versions - Latest release: 3 days ago - 4.77 thousand downloads last month - 1 stars on GitHub - 1 maintainer
plugin-scanner 3.57.0 π°
Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.1,637 versions - Latest release: 4 days ago - 57.8 thousand downloads last month - 1,000 stars on GitHub - 1 maintainer
sunglasses 0.6.14
The input firewall for AI agents. Local-first, zero network calls, MIT.117 versions - Latest release: 2 days ago - 1.86 thousand downloads last month - 10 stars on GitHub - 1 maintainer
bawbel-scanner 1.3.0
Security linter and scanner for MCP servers and AI skill files. Detects toxic flows, prompt injec...11 versions - Latest release: 4 months ago - 269 downloads last month - 12 stars on GitHub - 1 maintainer
mvm 0.15.1
Declarative microVM workloads for Python β author once, emit a Nix flake, boot under mvm.5 versions - Latest release: 5 months ago - 27 downloads last month - 45 stars on GitHub - 1 maintainer
otterdog 1.6.1
Tool to manage GitHub organizations and their repositories.28 versions - Latest release: about 1 month ago - 688 downloads last month - 54 stars on GitHub - 3 maintainers
ds-xbom-lib 6.3.0 π°
xBOM library for owasp depscan12 versions - Latest release: 3 months ago - 7.83 thousand downloads last month - 1,296 stars on GitHub
ds-analysis-lib 6.3.0 π°
Analysis library for owasp depscan13 versions - Latest release: 3 months ago - 7.86 thousand downloads last month - 1,296 stars on GitHub
ds-reporting-lib 6.3.0 π°
Reporting library for owasp depscan10 versions - Latest release: 3 months ago - 7.84 thousand downloads last month - 1,296 stars on GitHub
owasp-depscan 6.3.0 π°
Fully open-source security audit for project dependencies based on known vulnerabilities and advi...66 versions - Latest release: 3 months ago - 1 dependent package - 14.2 thousand downloads last month - 1,296 stars on GitHub - 1 maintainer
ds-server-lib 6.3.0 π°
Server library for owasp depscan8 versions - Latest release: 3 months ago - 181 downloads last month - 1,296 stars on GitHub - 1 maintainer
proofbundle 6.3.1 π°
Emit and verify portable cryptographic evidence bundles, offline: Ed25519 + RFC 6962 Merkle + opt...52 versions - Latest release: 7 days ago - 2.16 thousand downloads last month - 3 stars on GitHub - 1 maintainer
dockerdna 1.1.1
Layer-by-Layer Container Security DNA Analysis β secrets detection, compose scanning, CIS complia...9 versions - Latest release: 4 days ago - 653 downloads last month - 7 stars on GitHub - 1 maintainer
context-report 0.1.0
An open, signed report format for whether an agent context artifact actually works: an in-toto pr...1 version - Latest release: about 2 months ago - 177 downloads last month - 1 stars on GitHub - 1 maintainer
code-guardian-mcp 0.4.2
Is this codebase safe to run, will it work, and is it complete? Deterministic Safe, Works and Com...7 versions - Latest release: 4 days ago - 0 downloads last month - 0 stars on GitHub - 1 maintainer
mcp-audit-scanner 0.21.1 π°
Privacy-first security scanner for MCP server configurations28 versions - Latest release: 4 days ago - 756 downloads last month - 5 stars on GitHub - 1 maintainer
trustcheck 2.2.3
Package trust and provenance verification for PyPI consumers.33 versions - Latest release: 4 months ago - 231 downloads last month - 62 stars on GitHub - 1 maintainer
ossiq 0.1.14
Utility to forecast risks associated with currently installed packages updates12 versions - Latest release: 5 days ago - 431 downloads last month - 6 stars on GitHub
pydependencycheck 1.5.1
Dependency intelligence and governance platform for Python projects11 versions - Latest release: 6 days ago - 104 downloads last month - 1 stars on GitHub - 1 maintainer
skylos 5.0.0
Python dead code, security and secrets scanner with a pull-request gate; narrower checks for Type...127 versions - Latest release: 6 days ago - 64.8 thousand downloads last month - 847 stars on GitHub - 1 maintainer
packj 0.15
Packj flags "risky" open-source packages in your software supply chain14 versions - Latest release: over 3 years ago - 82 downloads last month - 694 stars on GitHub - 1 maintainer
bumblebee-scan 0.1.6
Supply-chain inventory collector for package, extension, and developer-tool metadata on macOS and...5 versions - Latest release: 4 months ago - 26 downloads last month - 5,093 stars on GitHub - 1 maintainer
attest-core 0.1.0
attest core domain model, canonicalisation, and CSD-1 digest1 version - Latest release: about 1 month ago - 265 downloads last month - 1 stars on GitHub - 1 maintainer
attest-collect 0.1.0
attest Git and provenance-signal collectors1 version - Latest release: about 1 month ago - 207 downloads last month - 1 stars on GitHub - 1 maintainer
attest-cli 0.1.4
attest command-line composition and presentation layer5 versions - Latest release: 14 days ago - 425 downloads last month - 1 stars on GitHub - 1 maintainer
attest-store 0.1.1
attest Git-ref, filesystem, and OCI storage adapters2 versions - Latest release: about 1 month ago - 302 downloads last month - 1 stars on GitHub - 1 maintainer
agent-aegis 1.0.0 π°
Auto-instrument AI agent frameworks with runtime security. One line to govern LangChain, CrewAI, ...20 versions - Latest release: 3 months ago - 317 downloads last month - 18 stars on GitHub - 1 maintainer
prism-scanner 0.2.2
Security scanner for AI Agent skills, plugins, and MCP servers6 versions - Latest release: 7 months ago - 156 downloads last month - 27 stars on GitHub - 1 maintainer
ntia-conformance-checker 6.0.0
Check SPDX SBOM for NTIA minimum elements and CISA baseline attributes26 versions - Latest release: 24 days ago - 20.9 thousand downloads last month - 93 stars on GitHub - 1 maintainer
conda-sigstore 0.1.3 π°
Create and verify Sigstore attestations for conda packages4 versions - Latest release: 10 days ago - 259 downloads last month - 0 stars on GitHub - 1 maintainer
agtmls 0.0.26 π°
The universal agent skills registry β polyglot engineering skills and system prompts for Claude C...19 versions - Latest release: 11 days ago - 1.58 thousand downloads last month - 1 stars on GitHub - 1 maintainer
guardana-core 0.41.0
Guardana engine: targets, rules, evaluators, findings, profiles.52 versions - Latest release: 25 days ago - 3.05 thousand downloads last month - 254 stars on GitHub - 1 maintainer
guardana-report 0.41.0
Guardana renderers: human, SARIF, JSON, and JUnit output.52 versions - Latest release: 25 days ago - 2.69 thousand downloads last month - 254 stars on GitHub - 1 maintainer
guardana-server 0.41.0
Guardana collector: minimal FastAPI server that ingests and lists findings.52 versions - Latest release: 25 days ago - 2.35 thousand downloads last month - 254 stars on GitHub - 1 maintainer
guardana-cli 0.41.0
Guardana command-line interface: scan, probe, monitor, init, rules, new-rule.52 versions - Latest release: 25 days ago - 2.51 thousand downloads last month - 254 stars on GitHub - 1 maintainer
guardana-rules 0.41.0
Guardana built-in rule and evaluator pack.52 versions - Latest release: 25 days ago - 2.64 thousand downloads last month - 254 stars on GitHub - 1 maintainer
sentinel-remediation 0.1.0
Autonomous CVE remediation β patches build files and source code, verifies the build, opens a PR1 version - Latest release: 5 months ago - 9 downloads last month - 1 stars on GitHub - 1 maintainer
carrier-verify 0.1.0
Verify motor carrier identity against public FMCSA data and flag freight-fraud red flags at pickup.1 version - Latest release: about 2 months ago - 102 downloads last month - 0 stars on GitHub - 1 maintainer
agent-harness-aibom 1.0.0
AIBOM generator for AI agent harnesses (Hermes, OpenClaw) and their model/skill/MCP/hook surface36 versions - Latest release: about 2 months ago - 4.21 thousand downloads last month - 0 stars on GitHub - 1 maintainer
starmetal 0.4.0 π°
High-performance, self-hosted multi-language package registry and pull-through registry proxy for...5 versions - Latest release: 3 months ago - 50 downloads last month - 12 stars on GitHub - 1 maintainer
immunity-agent 1.63.0
Deprecated β renamed to 'prismor'. Installs prismor for you. Run: pip install prismor110 versions - Latest release: 10 days ago - 4.7 thousand downloads last month - 420 stars on GitHub - 1 maintainer
prismor 1.63.0
Runtime security for AI coding agents: policy enforcement, secret prevention, and supply-chain bl...111 versions - Latest release: 10 days ago - 4.22 thousand downloads last month - 420 stars on GitHub - 1 maintainer
ctxsentry 0.5.0
Scan a repository for prompt-injection payloads before you point an AI coding agent at it.2 versions - Latest release: about 2 months ago - 275 downloads last month - 1 stars on GitHub - 1 maintainer
hipcheck-sdk 0.2.1
An SDK for developing Hipcheck plugins3 versions - Latest release: over 1 year ago - 15 downloads last month - 129 stars on GitHub - 2 maintainers
deployproof 1.1.19
DeployProof (Python CLI) β AI-code verification, in-memory AST mutation testing, secrets scanning...23 versions - Latest release: about 2 months ago - 491 downloads last month - 5 stars on GitHub - 1 maintainer
gitgalaxy 2.11.0
An AST-free, LLM-free zero-trust static analysis engine for mapping architectural risk, securing ...73 versions - Latest release: 28 days ago - 1.3 thousand downloads last month - 58 stars on GitHub - 1 maintainer
blastgate 0.1.0
Run package installs with no credentials available and no network egress except an explicit allow...1 version - Latest release: 2 months ago - 21 downloads last month - 1 stars on GitHub - 1 maintainer
artifactproof 0.1.0
Verify locally that a final PPTX and its supplied QA evidence still match an HMAC-signed receipt ...1 version - Latest release: 2 months ago - 28 downloads last month - 913 stars on GitHub - 1 maintainer
deptrail 0.2.0
Time-axis forensics for npm supply-chain incidents: did we install it, did it run, what must be r...3 versions - Latest release: 2 months ago - 29 downloads last month - 0 stars on GitHub - 1 maintainer
safe-packages 0.1.1
The cli tool for checking the security of the packages.2 versions - Latest release: 11 months ago - 5 downloads last month - 1 stars on GitHub - 1 maintainer
mcpscan-cli 0.20.0
Supply-chain security scanner for MCP servers and Claude Code projects β catch tool-poisoning, co...2 versions - Latest release: 2 months ago - 80 downloads last month - 0 stars on GitHub - 1 maintainer
assurance-reach 0.1.1
What a change to a file reaches, by a code graph such as Graphify's: each hop at its call site, h...2 versions - Latest release: 19 days ago - 0 downloads last month - 7 stars on GitHub - 1 maintainer
assurance-deps 0.2.4
What a Python install is about to execute, read without executing it β and what could not be read.6 versions - Latest release: about 1 month ago - 3.01 thousand downloads last month - 7 stars on GitHub - 1 maintainer
assurance 0.1.30
One install for the assurance tools: what an agent run covered, spent, may do, and is about to in...31 versions - Latest release: 16 days ago - 4.72 thousand downloads last month - 7 stars on GitHub - 1 maintainer
hemlock-scan 0.8.1
Static supply-chain checks for npm and PyPI packages, lockfiles, provenance, and known malware.6 versions - Latest release: 3 months ago - 46 downloads last month - 2 stars on GitHub - 1 maintainer
agentic-skills-manager 1.0.4
Skills Manager: scan, install, update, and analyze AI agent skills safely across Claude, Cursor, ...5 versions - Latest release: 3 months ago - 1.13 thousand downloads last month - 0 stars on GitHub - 1 maintainer
cudabom 0.1.0
Find the CUDA your SBOM missed: evidence-backed CUDA identity and security-grade SBOM/VEX for art...1 version - Latest release: 12 days ago - 2 stars on GitHub - 1 maintainer
gha-audit 0.1.3
Scan .github/workflows for known GitHub Actions supply-chain and CI security misconfigurations (u...4 versions - Latest release: 3 months ago - 48 downloads last month - 0 stars on GitHub - 1 maintainer
quantumd 0.7.5a0
Governed verification, policy enforcement, and evidence-bound execution for quantum software.1 version - Latest release: 3 months ago - 10 downloads last month - 2 stars on GitHub - 1 maintainer
daleq4py 1.0.1
CLI for comparing alternatively built Python packages; SoufflΓ© is required for inference-based co...1 version - Latest release: 3 months ago - 21 downloads last month - 2 stars on GitHub - 1 maintainer
aibomstd 0.3.0
AI Bill of Materials Standard β open standard SDK for AI component transparency9 versions - Latest release: 3 months ago - 88 downloads last month - 1 stars on GitHub - 1 maintainer
mcpsafetywarden 1.5.0
MCP proxy server with behavioral profiling, security scanning, risk gating, and safe execution100 versions - Latest release: 10 days ago - 1.91 thousand downloads last month - 8 stars on GitHub - 1 maintainer
vdb-mcp 0.2.6
MCP server for VDB β AI-aware vulnerability database (packages, MCP servers, models). Check packa...10 versions - Latest release: 27 days ago - 906 downloads last month - 0 stars on GitHub - 1 maintainer
collective-phase-control-fabric 1.0.1
Evidence-bound analysis and finite intervention control for collective workflows.5 versions - Latest release: about 2 months ago - 512 downloads last month - 0 stars on GitHub - 1 maintainer
provenire 0.1.5
AIκ° μμ±ν μ½λκ° μ€νμμ€ λΌμ΄μ μ€λ₯Ό λ² κΌλμ§ PRμμ νμ§νλ μ€νμμ€ λΌμ΄μ μ€ κ²μ΄νΈ7 versions - Latest release: about 2 months ago - 46 downloads last month - 0 stars on GitHub - 1 maintainer
skillwatch 0.4.1
Monitor external URLs referenced by AI agent skills and MCP tools for bait-and-switch content cha...4 versions - Latest release: 3 months ago - 20 downloads last month - 0 stars on GitHub - 1 maintainer
spira-trust 0.7.4
Offline verifier for Python wheel evidence before install.11 versions - Latest release: 3 months ago - 37 downloads last month - 1 stars on GitHub - 1 maintainer
agent-zero-trust 0.1.15
Offline repository inspection for coding-agent instructions: scan, compare, explain, and export a...15 versions - Latest release: about 1 month ago - 937 downloads last month - 4 stars on GitHub - 1 maintainer
craevidence 4.9.0
CLI tool for CI/CD integration with CRA Evidence15 versions - Latest release: 17 days ago - 1.34 thousand downloads last month - 2 stars on GitHub - 1 maintainer
mcpradar 1.0.0rc4
Security scanner for Model Context Protocol servers. Catch tool poisoning, prompt injection, and ...2 versions - Latest release: 4 months ago - 58 downloads last month - 4 stars on GitHub - 1 maintainer
langdoctor 0.1.5
Production-readiness and security audit CLI for LangGraph / LangChain projects β brew doctor for ...6 versions - Latest release: 2 months ago - 55 downloads last month - 0 stars on GitHub - 1 maintainer
verifyhash-einvoice 0.2.9 π°
Zero-dependency EN 16931 / XRechnung (UBL + CII) e-invoice conformance validator β 297 business r...5 versions - Latest release: 3 months ago - 53 downloads last month - 0 stars on GitHub - 1 maintainer
ud-resolver 1.4.3
Cross-ecosystem dependency resolver β PyPI, npm, Cargo, Conda, Maven, Go, and more35 versions - Latest release: 3 months ago - 110 downloads last month - 1 stars on GitHub - 1 maintainer
base-image-inspector 0.3.0
Interactive CLI to pick and digest-pin official container base images (Python, .NET, Java, Go, No...4 versions - Latest release: 4 months ago - 35 downloads last month - 1 stars on GitHub - 1 maintainer
apisec-ai-surface 1.1.1
Map your application's AI attack surface from source: MCP servers (with security audit), agent fr...11 versions - Latest release: 21 days ago - 557 downloads last month - 138 stars on GitHub - 1 maintainer
getdev 0.0.2 π°
getdev is a Rust CLI, not a Python package β it verifies, secures, and ships AI-generated code. T...2 versions - Latest release: 4 months ago - 1 stars on GitHub - 1 maintainer
cuere 0.2.0
QR codes in your terminal: Unicode half-block rendering, Rich integration, wallet-URI helpers2 versions - Latest release: 4 months ago - 16 downloads last month - 0 stars on GitHub - 1 maintainer
redteam-mcp 0.5.2
MCP security scanner β source code audit with 25+ Semgrep rules, config health checks, SARIF outp...8 versions - Latest release: about 2 months ago - 152 downloads last month - 3 stars on GitHub - 1 maintainer
oss-trust-framework 0.8.0
Multi-gate open source supply chain trust validation pipeline with zero-day expedited lane4 versions - Latest release: about 1 month ago - 155 downloads last month - 2 stars on GitHub - 1 maintainer
aisbom-cli 1.6.0
Static security scanner for ML model files β detects pickle bombs, Keras Lambda RCE and GGUF temp...50 versions - Latest release: about 2 months ago - 760 downloads last month - 82 stars on GitHub - 1 maintainer
arcis 1.7.1
Inside-the-app security middleware for Python. FastAPI, Django, and Litestar run the full sanitiz...21 versions - Latest release: 5 months ago - 103 downloads last month - 9 stars on GitHub - 1 maintainer
agentsentinel-cli 0.9.14
AI agent and MCP server security scanner β discovery, static analysis, supply chain audit, and mu...34 versions - Latest release: 2 months ago - 271 downloads last month - 0 stars on GitHub - 1 maintainer
pipeline-check 1.19.0
Security scanner for CI/CD pipelines, IaC, and cloud: GitHub Actions, GitLab CI, Terraform, Kuber...31 versions - Latest release: 3 months ago - 60 downloads last month - 7 stars on GitHub - 1 maintainer
nodesafe 0.6.0
Security scanner for ComfyUI custom nodes and node-based workflow plugins5 versions - Latest release: 5 months ago - 30 downloads last month - 7 stars on GitHub - 1 maintainer
nodesafes 0.0.1
Defensive registration. The real package is 'nodesafe'.1 version - Latest release: 5 months ago - 7 downloads last month - 7 stars on GitHub - 1 maintainer
skillfortify 0.6.0
SkillFortify β Supply chain security scanner for AI agent skills. Supports 22 frameworks.12 versions - Latest release: 3 months ago - 183 downloads last month - 38 stars on GitHub - 1 maintainer
trustsight 0.20.2
CLI-based AUR package update vetting tool42 versions - Latest release: 14 days ago - 1 thousand downloads last month - 41 stars on GitHub - 1 maintainer
pynodesafe 0.0.1
Defensive registration. The real package is 'nodesafe'.1 version - Latest release: 5 months ago - 4 downloads last month - 7 stars on GitHub - 1 maintainer
invigil 1.7.1
Linters check your code. Invigil checks whether your repo is legible β to newcomers and to AI age...11 versions - Latest release: 3 months ago - 191 downloads last month - 1 stars on GitHub - 1 maintainer
pkgguard-cli 0.1.0
Vet the packages and repos your AI assistant recommended β before you install. Catches hallucinat...1 version - Latest release: 5 months ago - 177 downloads last month - 0 stars on GitHub - 1 maintainer
deep-scout-github 1.0.0
Deep reconnaissance on GitHub organizations to uncover accidentally committed secrets1 version - Latest release: 5 months ago - 39 downloads last month - 1 maintainer
cleanlib-mcp-server 0.5.4
CleanLibrary MCP server β exposes verdict-aware supply-chain risk assessment as Model Context Pro...12 versions - Latest release: 4 months ago - 1 maintainer
Related Keywords
security
114
python
82
devsecops
81
mcp
79
ai-agents
60
ai-security
56
supply-chain
50
llm-security
49
cli
46
static-analysis
44
sbom
43
compliance
40
agent-security
38
llm
38
prompt-injection
37
model-context-protocol
36
security-scanner
35
github-actions
34
claude-code
30
sarif
29
security-tools
27
ai
27
owasp
25
sast
25
attestation
24
in-toto
23
mcp-security
22
governance
21
vulnerability-scanner
21
audit
21
ai-safety
21
scanner
20
cyclonedx
20
verification
20
slsa
19
cve
18
provenance
18
cursor
17
eu-ai-act
17
sigstore
17
cryptography
16
receipts
15
audit-trail
14
guardrails
14
runtime-security
14
ai-agent-security
14
ed25519
14
mcp-server
13
git
13
integrity
13
ai-governance
13
copilot
13
open-source
12
observability
12
pypi
12
npm
12
claude
12
ai-agent
11
tamper-evidence
11
security-audit
11
developer-tools
11
inference
11
malware-detection
11
cryptographic-receipts
10
jcs
10
non-repudiation
10
pydantic-ai
10
vex
10
owasp-asi
10
rfc8785
10
signed-receipts
10
tool-call-validation
10
runtime-verification
10
verifiable
10
sca
9
dependency-analysis
9
ci-cd
9
cybersecurity
9
ml-security
9
code-security
9
vulnerability-scanners
8
vulnerability
8
appsec
8
containers
8
dependencies
8
pip
8
scitt
8
mlsecops
8
agentic-ai
8
package-manager
7
kubernetes
7
mitre-atlas
7
codex
7
devops
7
reachability-analysis
7
osv
7
zero-trust
6
opentelemetry
6
spdx
6
dependency-audit
6