Supply-chain security gate - dependency manifest parsing, SBOM (CycloneDX/SPDX), offline advisory matching, policy gates, post-quantum scanning.
-
Updated
Sep 22, 2026 - Python
#
dependency-security
Here are 11 public repositories matching this topic...
👻 Stop installing packages that don't exist. When AI hallucinates names like "flask-gpt-helper", attackers register them as malware. Phantom Guard detects slopsquatting attacks across PyPI, npm & crates.io before you install.
python cli npm security devops pypi pip cybersecurity typosquatting ai-safety devsecops malware-detection dependency-security supply-chain-security package-validation slopsquatting
-
Updated
Mar 6, 2026 - Python
Multi-gate open source supply chain trust validation pipeline with zero-day CVE expedited lane
owasp software-supply-chain osv zero-day devsecops security-framework sbom github-actions dependency-security behavioral-analysis supply-chain-security sigstore openssf ci-cd-security npm-security
-
Updated
Sep 20, 2026 - Python
Long-Term Support (LTS) security fork of urllib3 with backported CVE fixes for Python 3.7 and 3.8.
python security security-audit dos http-client cybersecurity lts cve eol ssrf backport security-tools python37 urllib3 python38 dependency-security python39 long-term-support
-
Updated
Feb 23, 2026 - Python
Durable decisioning for open-source vulnerability response. Proves upstream model replacements flip 15–49% of decisions overnight and gates them. Bit-for-bit replayable, exactly-once, injection-proof by construction.
python vulnerability-management policy-engine devsecops system-design security-engineering dependency-security epss supply-chain-security deterministic-systems
-
Updated
Aug 8, 2026 - Python
Reachability-aware CVE prioritizer: tells you which vulnerabilities are actually reachable from your code, and drafts the GitHub issue for the ones that matter.
python rust tree-sitter typescript static-analysis cybersecurity cve appsec vulnerability-management software-supply-chain osv security-automation sarif devsecops software-composition-analysis reachability-analysis dependency-security claude-api vulnerability-triage github-code-scanning
-
Updated
Jul 21, 2026 - Python
Explain and prioritize Node.js dependency risks for small projects
dependency-analysis devsecops sbom dependency-security open-source-security supply-chain-security npm-security
-
Updated
Sep 10, 2026 - Python
BitMEX Testnet research bot with fail-closed reconciliation, risk gates, a private read-only dashboard, and dependency security auditing.
python docker security-audit trading-bot cryptocurrency technical-analysis testnet algorithmic-trading observability bitmex risk-management backtesting ccxt dependency-security shadow-mode
-
Updated
Jul 14, 2026 - Python
Vet the packages & repos your AI assistant recommended — before you install. Catches hallucinated/slopsquatted names, CVEs, malware, fake stars, and license traps in 25 languages. MCP server so the assistant checks itself. No API key.
multilingual npm package-manager mcp pypi devtools typosquatting ai-safety security-tools ai-agents claude license-compliance hallucination dependency-security supply-chain-security llm slopsquatting
-
Updated
Jul 29, 2026 - Python
Checks public GitHub repos' Python/JS dependency manifests against OSV.dev
-
Updated
Jul 20, 2026 - Python
Hands-on demo for the OSS Trust Framework — 6 scenarios including live CVE detection, IronWorm and Miasma behavioral pattern matching, and a full zero-day MFA quorum workflow. 131 passing tests · all offline.
software-supply-chain devsecops security-testing dependency-security supply-chain-security ci-cd-security
-
Updated
Jun 6, 2026 - Python
Add this topic to your repo
To associate your repository with the dependency-security topic, visit your repo's landing page and select "manage topics."