npm · crates.io
endojs/endo
Endo is a distributed secure JavaScript sandbox, based on SES
Apache-2.015 вер. 2026 р. · метрики 2.10.0
Усі теги
Тег каталогу
#supply-chain
Усі репозиторії публічного реєстру з цим тегом — із тем GitHub або ключових слів, які публікують їхні реєстри пакетів. Здоров'я вимірюється за тією ж версіонованою методологією, що й решта реєстру.
64 записи
Go
sigstore/rekor
Software Supply Chain Transparency Log
Apache-2.010 вер. 2026 р. · метрики 2.10.0
Go
sigstore/sigstore
Common go library shared across sigstore services and clients
Apache-2.021 жовт. 2026 р. · метрики 2.10.0
PyPI
sigstore/sigstore-python
A Sigstore client written in Python
Власна ліцензія17 вер. 2026 р. · метрики 2.10.0
Go · npm
mindersec/minder
Software Supply Chain Security Platform
Apache-2.012 вер. 2026 р. · метрики 2.10.0
Go
sigstore/rekor-tiles
Signature Transparency Log designed for ease of use, low cost, and minimal maintenance
Apache-2.015 вер. 2026 р. · метрики 2.10.0
Go
guacsec/guac
GUAC aggregates software security metadata into a high fidelity graph database.
Apache-2.019 жовт. 2026 р. · метрики 2.10.0
PyPI
pypa/pip-audit
Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them
Apache-2.027 серп. 2026 р. · метрики 2.10.0
PyPI · npm
koda-ai-studio/agent-bom
Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.
Apache-2.016 жовт. 2026 р. · метрики 2.10.0
PyPI · npm
msaad00/agent-bom
Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.
Apache-2.08 вер. 2026 р. · метрики 2.10.0
Go
theupdateframework/go-tuf
Go implementation of The Update Framework (TUF)
Apache-2.015 вер. 2026 р. · метрики 2.10.0
PyPI
sigstore/gh-action-sigstore-python
A GitHub Action for sigstore-python
Apache-2.08 жовт. 2026 р. · метрики 2.10.0
npm
sigstore/sigstore-js
Code-signing for npm packages
Apache-2.021 жовт. 2026 р. · метрики 2.10.0
npm · Maven · NuGet +1
cdxgen/cdxgen
Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server
Apache-2.014 вер. 2026 р. · метрики 2.10.0
npm
asamassekou10/ship-safe
The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API key needed, JSON and SARIF output.
MIT22 жовт. 2026 р. · метрики 2.10.0
Go
carabiner-dev/ampel
🔴🟡🟢 The Amazing Multipurpose Policy Engine (and L)
Apache-2.012 вер. 2026 р. · метрики 2.10.0
Go · npm
seebom-labs/BOMHort
About standalone, Kubernetes-native Software Bill of Materials (SBOM) visualization and governance platform
Apache-2.014 вер. 2026 р. · метрики 2.10.0
crates.io
rust-secure-code/cargo-auditable
Make production Rust binaries auditable
Apache-2.021 жовт. 2026 р. · метрики 2.10.0
npm
blamejs/blamejs
The Node framework that owns its stack.
Apache-2.020 жовт. 2026 р. · метрики 2.10.0
npm · PyPI
DNSZLSK/muad-dib
Real-time npm/PyPI supply-chain threat detection. Behavioral chain analysis, AST scanning, IOC feeds, and compound scoring engine.
AGPL-3.020 жовт. 2026 р. · метрики 2.10.0
PyPI · npm
PrismorSec/prismor
Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude, codex, langchain etc.)
Apache-2.011 вер. 2026 р. · метрики 2.10.0
crates.io
sebastienrousseau/metadata-gen
Typed, audited, zero-allocation-bound frontmatter parser for Rust — YAML/TOML/JSON extraction, SEO meta tag emission, supply-chain attested (cargo-vet, SBOM, RUSTSEC). WASI-bound roadmap.
Apache-2.018 вер. 2026 р. · метрики 2.10.0
PyPI
Ndevu12/stayAwakeBot
A bot for helping you to stay secure! Services stay a wake
AGPL-3.015 вер. 2026 р. · метрики 2.10.0
PyPI
pezhik/skilltotal
Scan AI components (MCP servers, agent skills, npm/PyPI packages) for malware & risky capabilities. Local, deterministic, evidence-anchored. Free & OSS.
Apache-2.09 жовт. 2026 р. · метрики 2.10.0
npm
blamejs/pki
Pure-JavaScript PKI toolkit that owns its stack — X.509, ASN.1/DER, CMS, PQC-first.
Apache-2.013 вер. 2026 р. · метрики 2.10.0
npm
mayurrawte/searoute-ts
Shortest sea route between any two points on Earth. TypeScript library with the 2025 Eurostat maritime network, canal/strait restrictions (Suez, Panama, Bab-el-Mandeb…), vessel-draft gating, K-shortest alternatives, multi-leg waypoints, and ETA from speed.
MIT20 вер. 2026 р. · метрики 2.10.0
PyPI
shcherbak-ai/tethered
tethered - Runtime network egress control for Python. One function call to restrict which hosts your code can connect to.
MIT14 жовт. 2026 р. · метрики 2.10.0
npm
this-is-securl/securl
SecURL - passive external security posture scanner. Free hosted scanner, open-source engine, CI integration
MIT8 вер. 2026 р. · метрики 2.10.0
npm
adamsjack711-ux/pkgxray
Pre-install security for AI agents, npm packages, and MCP servers. Zero-dep local static analysis; normal scans never execute package code.
MIT10 вер. 2026 р. · метрики 2.10.0
Packagist
dgtlss/warden
A Laravel package that proactively monitors your dependencies for security vulnerabilities by running automated composer audits and sending notifications via webhooks and email
MIT22 жовт. 2026 р. · метрики 2.10.0