41,195 packages matching supply-chain-firewall

sha1-hulud-scanner

v1.0.1 · 8 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Sha1-Hulud 2.0 npm supply chain attack scanner - Real-time detection using Koi.ai data

4.7KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.0.1 (the latest release), from the OSV.dev database.

jscpd-linux-x64-musl

v5.0.14 · 10 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Prebuilt Linux x64 musl binaries for jscpd

159.0KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v5.0.14 (the latest release), from the OSV.dev database.

cpd-linux-x64-musl

v5.0.11 · 1 month ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Prebuilt Linux x64 musl binaries for cpd

91.3KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v5.0.11 (the latest release), from the OSV.dev database.

@socketsecurity/bun-security-scanner

v1.1.2 · 8 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Bun security scanner for SocketDev

77.0KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.1.2 (the latest release), from the OSV.dev database.

@launchdarkly/react-sdk

v4.1.11 · 4 hours ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

LaunchDarkly SDK for React frameworks

74.1KDownloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v4.1.11 (the latest release), from the OSV.dev database.

@launchdarkly/openfeature-js-server-common

v1.0.1 · 16 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

LaunchDarkly OpenFeature common provider for server-side JavaScript SDKs

74.2KDownloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.0.1 (the latest release), from the OSV.dev database.

stream-chain

v4.2.5 · 1 month ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Chain functions, generators, Node streams, and Web streams into a pipeline with backpressure support.

8.9MDownloads across all versions in the last 7 days, from the official npm downloads API.BSD-3-ClauseLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v4.2.5 (the latest release), from the OSV.dev database.

@arcane-spark/ubel-node

v0.10.0 · 1 day ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Software supply-chain and source-code security for Node.js. SCA: resolves dependencies, scans via OSV.dev and NVD, and annotates findings with heuristic reachability (SBOM/CycloneDX + SARIF reporting). Firewall: gates npm/pnpm/bun installs behind a lockfi

487Downloads across all versions in the last 7 days, from the official npm downloads API.SEE LICENSE IN LICENSE.mdLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.10.0 (the latest release), from the OSV.dev database.

config-chain

v1.1.13 · 5 years ago

85
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

HANDLE CONFIGURATION ONCE AND FOR ALL

22.9MDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.1.13 (the latest release), from the OSV.dev database.

nodemailer

v9.0.4 · 2 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Easy as cake e-mail sending from your Node.js applications

19.4MDownloads across all versions in the last 7 days, from the official npm downloads API.MIT-0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v9.0.4 (the latest release), from the OSV.dev database.

rollup-plugin-sbom

v4.0.0 · 20 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

A rollup, rolldown and vite plugin to generate SBOMs for your application

41.4KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v4.0.0 (the latest release), from the OSV.dev database.

@aws-sdk/client-supplychain

v3.1105.0 · 9 minutes ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

AWS SDK for JavaScript Supplychain Client for Node.js, Browser and React Native

1.3KDownloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v3.1105.0 (the latest release), from the OSV.dev database.

cpd-linux-arm64-gnu

v5.0.11 · 1 month ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Prebuilt Linux arm64 GNU binaries for cpd

27.9KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v5.0.11 (the latest release), from the OSV.dev database.

@openafw/openafw

v0.11.2 · 26 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

The local firewall for AI agents: route and repair them, and keep your secrets off the model, the API relay, and the supply chain. Local credential masking, per-route model routing, and security detectors on the wire. Free and fully open source.

35Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.11.2 (the latest release), from the OSV.dev database.

@launchdarkly/js-server-sdk-common-edge

v2.6.27 · 9 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

LaunchDarkly Server SDK for JavaScript - common Edge SDK code

61.7KDownloads across all versions in the last 7 days, from the official npm downloads API.

No known vulnerabilities

Known vulnerabilities affecting v2.6.27 (the latest release), from the OSV.dev database.

cd

v0.3.3 · 13 years ago

85
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

chdir in chainer fashion + read file

28.6KDownloads across all versions in the last 7 days, from the official npm downloads API.

No known vulnerabilities

Known vulnerabilities affecting v0.3.3 (the latest release), from the OSV.dev database.

sodtrack-web-ui

v0.114.1 · 15 hours ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

UI components for Sodtrack Web

460Downloads across all versions in the last 7 days, from the official npm downloads API.ISCLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.114.1 (the latest release), from the OSV.dev database.

jscpd-linux-arm64-gnu

v5.0.14 · 10 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Prebuilt Linux arm64 GNU binaries for jscpd

31.9KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v5.0.14 (the latest release), from the OSV.dev database.

jscpd-darwin-arm64

v5.0.14 · 10 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Prebuilt macOS arm64 binaries for jscpd

31.2KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v5.0.14 (the latest release), from the OSV.dev database.

@actions/artifact

v6.2.1 · 4 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Actions artifact lib

501.4KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v6.2.1 (the latest release), from the OSV.dev database.