#compliance

ESLint rules to ensure a repo is fully compliant with its hosting service such as GitHub, GitLab, Bitbucket, Codeberg, Forgejo, AWS, Azure, Google Cloud, Docker, Vercel, Netlify, DigitalOcean, etc...

Agentic Spec-Driven Development — 13 agents, 58 MCP tools, 10-phase enforced pipeline. From meeting transcript to PR in one command. Install via npm install -g specky-sdd@latest

A Symfony bundle for teams where audit is infrastructure, not just history.

A powerful, feature-rich activity logging solution for FilamentPHP v4/v5 with timeline views, dashboard widgets, and revert actions.

Open-source AI pentest and compliance-readiness CLI by NullSquare.

Analyze dependency licenses and get actionable licensing guidance for Python projects.

React components for ISO 15223-1 symbols and separate regulatory marks

Tool to check licensing of Composer depdencies against a set of rules to ensure compliance

Risk-based release gate for CRA (Article 14), NIS2 and DORA compliance with SBOM, KEV correlation, and auditable evidence.

A Rust library that lets you automatically redact sensitive data for safe logging and debugging.

Analyzes installed packages allowing to verify compliance with allowed licenses.

Sandboxed SBOM extraction from arbitrary artifacts. Outputs traceability records and CycloneDX JSON for automation, auditability, and supply chain security.

AI-assisted development harness for IEC 62304 medical software teams — includes dhfkit, a standalone DHF traceability engine

EgisAI SDK

ML-DSA-65 signed deploy attestations for the KXCO stack (NIST FIPS 204).

Tenant-isolation security scanner for self-hosted multi-tenant AI-agent platforms. SARIF, JSON, and MCP output.

Security infrastructure your AI can't be — deterministic, daily CVE intel past your model's training cutoff, whole-repo-aware, author-independent, and shift-left: secure_prompt secures the prompt before code generation. The security MCP for vibe coding: 450 rules, 39 tools, CLI + doctor for Next.js, Supabase, Clerk, Stripe, Prisma, Hono & MCP.

Enumerate your Kubernetes cluster with just 1 command

AGLedger TypeScript SDK: change control for AI agents. Self-hosted, signed, hash-chained. Patent pending.

EAA-2025-ready accessibility compliance platform — 21 npm packages: 31-rule WCAG 2.2 AA scanner pack, TypeScript scanner runtime (engine + browser + Playwright), reusable GitHub Actions workflow, EN 301 549 statement generator, 11-jurisdiction penalty estimator, VPAT 2.5 INT evidence emitter.

TypeScript SDK for the NitroPing audit log — batching client, error capture, Hono/Express/Nitro adapters, and GenAI cost tracing.

Runtime control, security, and governance for AI agents — decide what an agent may do at the moment it acts, revoke that authority instantly, and keep tamper-evident evidence of every decision.

CLI for the Aethis developer API — author, test, and publish rule bundles

The self-correcting memory layer for AI agents. Zero-dependency Python memory and MCP server. Supersede, revert, or forget a value deterministically. Verifiable erasure, witness-backed tamper-evident receipts, EU AI Act ready.

Open-source HIPAA compliance scanner for healthcare code. 140+ rules, 5 HIPAA categories. CLI + CI/CD + VS Code.

Network dependent Sudo session logger and logplayback GUI