Claim listing
homeofe/supply-chain-guard
Open-source supply-chain security scanner, local and offline. Matches known-malicious packages, extensions, plugins, providers, container images and CI actions in 15 ecosystems, including transitive lockfile dependencies. Detects GlassWorm, Shai-Hulud and 350+ threat indicators. GitHub Action, MCP server, CycloneDX SBOMs, SLSA grading.
Claim your listing to add a tagline, logo, and category. Verified maintainers get a Verified Publisher badge and priority placement on the AgentRank index.
Leave your email to claim this listing. GitHub verification coming soon.