Keyword: sbom
- supply-chain-guardReleased6h agoVersion5.2.42
Open-source supply-chain security scanner for npm, PyPI, Cargo, Go, Docker, VS Code extensions, GitHub Actions, IaC and Solana C2. Detects GlassWorm, Shai-Hulud, PPE attacks, dependency confusion and 120+ malware indicators. Generates CycloneDX 1.6 SBOMs
- @nuguardai/nuguardReleased3d agoVersion0.8.2
AI Application Security — SBOM generation, static analysis, behavioral validation, and adversarial red-team testing for AI agents and LLM-powered applications.
- @peac/mappings-slsaReleased16h agoVersion0.16.1
SLSA v1.2 provenance mapping for PEAC provenance extension
- @peac/mappings-intotoReleased16h agoVersion0.16.1
in-toto v1.0 attestation mapping for PEAC provenance extension
- @datanexusmcp/mcp-serverReleased2d agoVersion2.4.12
DataNexus MCP — AI-Ready public data intelligence. 55 tools: CVE risk verdicts, SBOM licence policy, frontend security (manifest audit, CI scanner, typosquatting), licence compatibility, nonprofit 990 trends, SBOM monitoring, federal contracts, NPI lookup
- @arcane-spark/ubel-nodeReleasedyesterdayVersion0.6.0
Supply-chain security firewall for Node.js — resolves dependencies, scans via OSV.dev and NVD, and enforces configurable vulnerability policies before anything reaches node_modules.
- @cyclonedx/cdxgenReleased4d agoVersion12.7.0
Creates CycloneDX Software Bill of Materials (SBOM) from source or container image
- @safedep/cliReleased5d agoVersion0.2.0
SafeDep CLI: open source software supply chain security
- @ecosyste-ms/criticalReleased3h agoVersion1.1.20260629
SQLite database of critical packages from ecosyste.ms