Catalogue tag

#supply-chain

Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.

37 records

Tagged “supply-chain”Ranked by health index

Packagist

59Moderatehealth index

k2gl/dsse

Sign and verify DSSE (Dead Simple Signing Envelope) payloads in PHP.

PHP★ 0↓ 2,480/moJul 26, 2026

MITJul 26, 2026 · metrics 2.10.0

npm

56Moderatehealth index

nkratk/llm-trust-guard

No repository description published.

TypeScript★ 1↓ 3,299/moJul 19, 2026

MITJul 19, 2026 · metrics 2.10.0

npm

54Moderatehealth index

adamsjack711-ux/pkgxray

Local CLI/MCP tool that audits AI-agent extensions and npm packages for supply-chain risk. Zero-dep Node. Static scan + OSV vuln precheck + sandboxed quarantine.

JavaScript★ 6↓ 4,133/moJul 17, 2026

MITJul 17, 2026 · metrics 2.10.0

npm · PyPI

53Moderatehealth index

YugantM/hvtracker-mcp

MCP server for HVTracker trust checks.

Python · JavaScript★ 1↓ 1,309/moJul 26, 2026

MITJul 26, 2026 · metrics 2.10.0

npm

50Moderatehealth index

iyulab/formulab

TypeScript library of 174 research-backed industrial engineering formulas across 14 domains — quality, metallurgy, logistics, safety, machining, and more — with zero dependencies.

TypeScript★ 0↓ 2,186/moJul 15, 2026

MITJul 15, 2026 · metrics 2.10.0

npm

48Weakhealth index

davidnichols-ops/trustcard

Cryptographic trust infrastructure for MCP servers — signed manifests, TOFU pinning, two-gate enforcement, and the "npm audit" scanner.

JavaScript★ 4↓ 2,861/moJul 26, 2026

MITJul 26, 2026 · metrics 2.10.0

npm

45Weakhealth index

dir-ai/voyager

The verified-brief organ for coding agents — cited, OSV-gated, injection-safe retrieval + package verification.

TypeScript★ 0↓ 2,868/moJul 27, 2026

MITJul 27, 2026 · metrics 2.10.0