Supply Chain Security GitHub Repositories (2026) · Open Source Tools

JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.

Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.

A comprehensive security scanner for Arch Linux AUR packages that analyzes PKGBUILDs and install scripts for malicious patterns, suspicious behavior, and security vulnerabilities. Written in Rust for performance and safety.

A CLI tool that prefetches project dependencies for hermetic container builds.

Offline cyber security agent for your apps and AI coding tools. Open R&D: measured in public, improved every release.

Scan your dev machine for AI agents, MCP servers, IDE extensions, and suspicious packages - in seconds.

blint is a Binary Linter that checks the security properties and capabilities of your executables. It can also generate a Software Bill-of-Materials (SBOM) for supported binaries.