Software Supply Chain Security Platform
Software Supply Chain Security GitHub Repositories (2026) · Open Source Tools
Discover the best Software Supply Chain Security open source repositories on GitHub. Explore trending tools, live star counts, source code, and developer projects updated daily.
GUAC aggregates software security metadata into a high fidelity graph database.
Reference implementation of OpenPubkey
Semantic SBOM/CBOM/AI-BOM diff, quality scoring, and compliance validation for CycloneDX/SPDX — component, license, and vulnerability change analysis, cryptographic inventory grading, PQC readiness (CNSA 2.0, NIST IR 8547), and regulatory gates for NTIA, FDA, EU CRA, BSI TR-03183, EUCC, SSDF, EO 14028, and the EU AI Act.
ReARM - Release Governance Platform
An open-source dataset of malicious software packages found in the wild.