npm
MarkAC007/mcp-server-scf
MCP server for SCF Controls Platform — security compliance controls, frameworks, evidence, and risk management for AI agents
MITJul 22, 2026 · metrics 2.10.0
All tags
Catalogue tag
#compliance
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
97 records
—
checkmarble/marble
Marble - the real time decision engine for fraud and AML
Custom licenseJul 27, 2026 · metrics 2.10.0
npm
lua-ai-global/governance
Zero-dependency TypeScript SDK for AI agent governance: policy enforcement, injection detection, tamper-evident audit, and standards mapping (EU AI Act, OWASP, NIST, ISO 42001)
MITJul 26, 2026 · metrics 2.10.0
npm
microsoftgraph/msgraph-sdk-typescript
No repository description published.
MITSep 5, 2026 · metrics 2.10.0
npm
paulasilvatech/specky
Agentic Spec-Driven Development — 13 agents, 58 MCP tools, 10-phase enforced pipeline. From meeting transcript to PR in one command. Install via npm install -g specky-sdd@latest
Custom licenseJul 27, 2026 · metrics 2.10.0
npm
Null-Square/Null-CLi
Open-source AI pentest and compliance-readiness CLI by NullSquare.
Custom licenseAug 4, 2026 · metrics 2.10.0
npm
Protocol-Wealth/pwos-core
Open source compliance-first AI operating system for SEC-registered investment advisers. Apache 2.0 licensed with defensive patent grant.
Apache-2.0Jul 25, 2026 · metrics 2.10.0
PyPI
ethanolivertroy/wilma
Wilma - AWS Bedrock Security Configuration Checker
GPL-3.0Jul 23, 2026 · metrics 2.10.0
Go
rezmoss/sbomlyze
git diff for your SBOM ,compare CycloneDX/SPDX/Syft bills of materials, detect tampering, and gate CI
Apache-2.0Jul 20, 2026 · metrics 2.10.0
npm
tmorell/license-compliance
Analyzes installed packages allowing to verify compliance with allowed licenses.
MITSep 6, 2026 · metrics 2.10.0
Go · npm
dmarcguardhq/dmarcguard
🛡️ A lightweight, self-hosted DMARC report parser with a beautiful Vue.js dashboard. Single-binary deployment with IMAP integration, SQLite storage, and RFC 7489 compliance. Built with Go and Vue 3 - no external dependencies required.
Apache-2.0Aug 13, 2026 · metrics 2.10.0
Go
had-nu/wardex
Risk-based release gate for CRA (Article 14), NIS2 and DORA compliance with SBOM, KEV correlation, and auditable evidence.
Custom licenseJul 20, 2026 · metrics 2.10.0
Packagist
laravel-chronicle/core
Chronicle - Verifiable Audit Logging and Append-Only Audit Trails for Laravel.
MITSep 5, 2026 · metrics 2.10.0
Packagist
rcsofttech85/AuditTrailBundle
A Symfony bundle for teams where audit is infrastructure, not just history.
MITJul 16, 2026 · metrics 2.10.0
Go
TomTonic/extract-sbom
Sandboxed SBOM extraction from arbitrary artifacts. Outputs traceability records and CycloneDX JSON for automation, auditability, and supply chain security.
BSD-3-ClauseJul 21, 2026 · metrics 2.10.0
PyPI · npm
aiexponenthq/license-compliance-checker
License Compliance Checker — Multi-ecosystem license + AI model scanner for EU AI Act Article 53 GPAI compliance. SBOM, SARIF, training-data risk. Apache 2.0.
Apache-2.0Jul 27, 2026 · metrics 2.10.0
PyPI
FinLang-Ltd/finlang
FinLang — Deterministic, auditable financial rules engine.
AGPL-3.0Jul 27, 2026 · metrics 2.10.0
Go
trisacrypto/envoy
An open source TRISA node for use in Travel Rule information transfers
MITJul 19, 2026 · metrics 2.10.0
Packagist
Lendable/composer-license-checker
Tool to check licensing of Composer depdencies against a set of rules to ensure compliance
MITJul 16, 2026 · metrics 2.10.0
npm
goklab/guardvibe
Security infrastructure your AI can't be — deterministic, daily CVE intel past your model's training cutoff, whole-repo-aware, author-independent, and shift-left: secure_prompt secures the prompt before code generation. The security MCP for vibe coding: 450 rules, 39 tools, CLI + doctor for Next.js, Supabase, Clerk, Stripe, Prisma, Hono & MCP.
Apache-2.0Jul 17, 2026 · metrics 2.10.0
npm
superhumaan/DNA
Open-source delivery platform for TypeScript teams — feature factory, quality gates, CI/GitHub push, 768-pack marketplace, compliance, runtime observer, and AI repair.
MITJul 22, 2026 · metrics 2.10.0
Go
alun-hub/sudo-logger
Network dependent Sudo session logger and logplayback GUI
AGPL-3.0Aug 22, 2026 · metrics 2.10.0
PyPI
dgeragh/license-audit
Analyze dependency licenses and get actionable licensing guidance for Python projects.
MITJul 17, 2026 · metrics 2.10.0
Go
djadmin/fort
Audit and fix your Mac's security in one command. No agent, no signup, open source.
MITSep 5, 2026 · metrics 2.10.0
Go
opensource-finance/osprey
Transaction monitoring that deploys in 60 seconds. CEL rules, FATF typologies, single Go binary.
Apache-2.0Aug 15, 2026 · metrics 2.10.0
Go · npm
kOlapsis/ackify
🔏 Proof of Read. Compliance made simple.
AGPL-3.0Aug 15, 2026 · metrics 2.10.0
npm
ankhorage/doctor
Executable doctor provider and standalone CLI for lightweight Ankhorage repo and package compliance diagnostics.
MITJul 24, 2026 · metrics 2.10.0
Hex
aryaminus/controlkeel
Agent control plane for governed AI coding: validate changes, enforce policy gates, track findings, proofs, and evals based on your habits.
Custom licenseJul 17, 2026 · metrics 2.10.0
PyPI
veldtlabs/veldt-kya
KYA (Know Your Agents) — Open-source trust, governance, and evidentiary assurance infrastructure for autonomous systems. Built on KYP (Know Your Principal), a unified trust model for human users, AI agents, service accounts, and machine identities.
Custom licenseJul 16, 2026 · metrics 2.10.0
crates.io
sformisano/redactable
Automatic redaction of sensitive data for safe logging and debugging
MITAug 22, 2026 · metrics 2.10.0