15,747 packages matching compliance-evidence

sentinel-warden

v0.1.0 · 1 month ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Supply-chain firewall for AI agent skills, MCP servers, and rules files. Scans for prompt injection, data exfiltration, and tool poisoning before you install — and emits an agent-BOM + compliance evidence as a byproduct.

8Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.0 (the latest release), from the OSV.dev database.

@amityco/social-plus-vise

v1.18.0 · 18 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Skill-guided deterministic CLI for social.plus SDK integration assistance.

205Downloads across all versions in the last 7 days, from the official npm downloads API.SEE LICENSE IN LICENSELicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.18.0 (the latest release), from the OSV.dev database.

@aws-sdk/client-auditmanager

v3.1106.0 · 15 hours ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

AWS SDK for JavaScript Auditmanager Client for Node.js, Browser and React Native

28.0KDownloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v3.1106.0 (the latest release), from the OSV.dev database.

@regixo/store

v0.1.22 · 11 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Regixo's local store — SQLite + files, on your machine (local-first). The single source of truth for the map: sources, datasets, columns, lineage, personal-data findings, activities, the change log, descriptions, the glossary and the compliance inputs — p

420Downloads across all versions in the last 7 days, from the official npm downloads API.AGPL-3.0-onlyLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.22 (the latest release), from the OSV.dev database.

@wasmagent/protocol

v0.1.7 · 12 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Canonical JSON Schemas for the WasmAgent Agent Evidence Protocol (AEP) and compliance contracts. Single source of truth across the WasmAgent org.

1.4KDownloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.7 (the latest release), from the OSV.dev database.

domino

v2.1.7 · 4 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Server-side DOM implementation based on Mozilla's dom.js

1.4MDownloads across all versions in the last 7 days, from the official npm downloads API.BSD-2-ClauseLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v2.1.7 (the latest release), from the OSV.dev database.

@evidence-dev/sdk

v4.0.2 · 6 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

<img src="../../../sites/docs/static/img/wordmark.svg" alt="evidence-logo" width="100%" />

34.4KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v4.0.2 (the latest release), from the OSV.dev database.

a2a-trustgate

v1.5.15 · 2 hours ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

A2A TrustGate CLI — Safety, compliance, and governance for AI agents. Screen every action before it executes.

345Downloads across all versions in the last 7 days, from the official npm downloads API.SEE LICENSE IN LICENSELicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.5.15 (the latest release), from the OSV.dev database.

@kungfu-tech/buildchain

v3.0.6 · 1 day ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Buildchain Release Passport, release governance, CLI toolkit, and site facts.

26.3KDownloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v3.0.6 (the latest release), from the OSV.dev database.

@regixo/ports

v0.1.22 · 11 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Interfaces only — the stable seam Regixo's separate proprietary paid layer implements. Contains NO paid logic.

375Downloads across all versions in the last 7 days, from the official npm downloads API.AGPL-3.0-onlyLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.22 (the latest release), from the OSV.dev database.

@metamask/compliance-controller

v2.1.0 · 2 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Manages OFAC compliance checks for wallet addresses

61.3KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v2.1.0 (the latest release), from the OSV.dev database.

@agentguard-run/spend

v0.15.13 · 17 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

All terminology and labels used in AgentGuard materials are descriptive of software functionality only, not legal definitions or guarantees of compliance. Terms like receipt, audit log, evidence, audit trail, and attestation refer solely to cryptographica

149Downloads across all versions in the last 7 days, from the official npm downloads API.SEE LICENSE IN LICENSELicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.15.13 (the latest release), from the OSV.dev database.

@regixo/scanner

v0.1.22 · 11 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Regixo's scanner — drives connectors, extracts metadata, builds the local-first catalog map. Reads metadata only (names, types, owners, lineage) — never row values.

341Downloads across all versions in the last 7 days, from the official npm downloads API.AGPL-3.0-onlyLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.22 (the latest release), from the OSV.dev database.

webpack-license-plugin

v4.5.1 · 1 year ago

95
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Extracts OSS license information of the npm packages in your webpack output

203.5KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v4.5.1 (the latest release), from the OSV.dev database.

@jordannewell/curtis-compliance

v1.3.1 · 10 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Open-source compliance checks for fintech code — pre-commit, PR review, and a hash-chained audit trail.

206Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.3.1 (the latest release), from the OSV.dev database.

nwmatcher

v1.4.4 · 8 years ago

85
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

A CSS3-compliant JavaScript selector engine.

822.3KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.4.4 (the latest release), from the OSV.dev database.

@twilio/twilio-compliance-embed

v2.1.3 · 5 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

React library for Twilio Compliance Embed

87.5KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v2.1.3 (the latest release), from the OSV.dev database.

@usenabla/n8n-nodes-nabla

v1.0.1 · 9 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

n8n node for Nabla Evidence Engine API - Compliance evidence orchestration and security analysis

2Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.0.1 (the latest release), from the OSV.dev database.

@regixo/web-data-lens

v0.1.22 · 11 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Regixo's free portal — the data map, drafted RoPA/DORA record, and the versioned /api/v1 read API, server-rendered from the local Node process (no SPA framework). Default port 4319, loopback-only.

352Downloads across all versions in the last 7 days, from the official npm downloads API.AGPL-3.0-onlyLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.22 (the latest release), from the OSV.dev database.

@regixo/connectors

v0.1.22 · 11 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Per-source adapters (kinds: sql · saas · manual · dbt · script). test() + discover(), metadata only. Built-in: Postgres · MySQL · SQL Server · Redshift · Snowflake · BigQuery · Stripe · dbt · CSV, plus agent-authored (BYOC) script connectors.

350Downloads across all versions in the last 7 days, from the official npm downloads API.AGPL-3.0-onlyLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.22 (the latest release), from the OSV.dev database.