Ephor gate — the identity & policy layer for AI agents. Standard MCP gateway (stdio + HTTP): every agent action risk-scored, policy-checked, human-approved when it matters, and recorded in a tamper-evident audit chain. https://ephor.dev

Cryptographic verification primitives for MCP tool definitions — Ed25519, ML-DSA, schema registry, audit chain, on-chain anchoring

Tamper-evident audit trail for Cloudflare Workers. SHA-256 hash chaining with R2 immutability and D1 indexing.

Prebuilt Linux x64 GNU binaries for cpd

Prebuilt Linux x64 musl binaries for jscpd

Audits NPM, Yarn, and PNPM projects in CI environments

Prebuilt Linux x64 musl binaries for cpd

Chain functions, generators, Node streams, and Web streams into a pipeline with backpressure support.

Offline Evidence bundle verifier for Walwarden — verifies Manifest signatures and Audit-chain integrity.

Verdaccio Middleware plugin to bypass npmjs audit

HANDLE CONFIGURATION ONCE AND FOR ALL

In-process MakerChecker governance. Import the pure primitives — deny-by-default authorization + separation of duties — with no server, no Postgres, and no audit chain; add the signed, offline-verifiable chain only when you want it.

Shared-store (Redis-backed) audit + token-vault satellites for Haechi (the 1.5.0 store seams) — the sha256 audit chain and the tokenization vault held across replicas over an injected store/client.

Given a response from the npm security api, render it into a variety of security reports

Generate an HTML report for CODEOWNERS ownership gaps and run in CI or from the CLI to fail when files are not covered.

Reshape into a better npm audit for the community and encourage more people to include security audit into their process.

Prebuilt macOS arm64 binaries for jscpd

Prebuilt Linux arm64 GNU binaries for cpd

Prebuilt Linux arm64 GNU binaries for jscpd

Core modules for audit-resolve.json file and logic of its processing