Standalone, zero-dependency CLI for npm supply chain security analysis — vulnerability scanning, OpenSSF Scorecard, install-script detection, publisher history, and more.

Supply chain security for 17 package managers. Blocks malware, typosquats, and vulnerabilities before they install.

Lightweight URL validator for Node.js. This package is intentionally malicious and used as a supply chain security teaching example in an ITI Node.js workshop.

Application, repository, dependency, CI/CD, and supply-chain security audit.

Lightweight npm supply chain security guard

Lightweight npm supply chain security guard

npm supply chain security scanner — scan before you install

A TypeScript-powered developer security companion CLI for supply chain security, dependency intelligence, secret detection, security auditing, encrypted local secrets management, Git security checks, and secure development education.

Bun security scanner for SocketDev

Demo package for a supply-chain security conference talk. The postinstall script reads the machine's hosts file (/etc/hosts) at install time to show what npm runs with no approval - locally only, sends no data, and has no dependencies.

pi coding-agent extension that intercepts network operations with approval flows, vulnerability scanning, and supply chain security enforcement.

Supply Chain Security Monitor

Agent-first local NPM registry with quarantine, prompt injection scanning, and supply chain security. Coming soon.

Advanced Supply Chain Security for Node.js. Monorepo for guardian-core, guardian-integrity, guardian-monitor, guardian-chain, and guardian-sandbox.

Comprehensive supply chain security platform with reachability analysis.

Dependency hygiene and supply chain security analysis for npm projects

Solid supply chain security for JavaScript & TypeScript — offline threat scan, modern risk reports, atomic auto-fix, optional runtime guard.

An all-in-one offensive security toolkit built in Rust. 250+ independent attack modules covering web exploitation, infrastructure testing, credential attacks, AI/LLM abuse, cloud/container, supply chain security, OT/ICS, IoT, network protocols, AI/LLM sec

Pin dependency versions to lock file resolutions for supply-chain security

Continuous supply-chain security runtime monitor for Node.js dependencies with auto-remediation, multi-source vulnerability intelligence, SBOM publishing, and microservices support.