Skip to content
#

dependency-security

Star

Here are 32 public repositories matching this topic...

Language: All
Filter by language
All 32 Go 6 JavaScript 6 Python 6 TypeScript 6 Shell 3 Rust 2 Dart 1
Sort: Most stars
Sort options
Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

edoardottt / depsdev

Sponsor
Star 67

CLI client (and Golang module) for deps.dev API. Free access to dependencies, licenses, advisories, and other critical health and security signals for open source package versions.

go npm security maven nuget pypi supply-chain cargo hacktoberfest dependency-management blue-team supply-chain-management defensive-security golang-module go-module sbom dependency-scanning dependency-security sbom-generator package-security
  • Updated Apr 14, 2026
  • Go

vimox-shah-genea / vulnerability-agent

Star 5

🛡️ AI-powered vulnerability scanner that automatically detects, analyzes, and fixes security issues in npm packages with intelligent code transformations. Supports GitHub Actions, CLI, Docker, and VS Code integration with Microsoft Teams notifications.

security devops automation code-transformation security-automation vulnerability-scanner npm-audit dependency-security ai-powered ai-code-generation automated-fixes
  • Updated Sep 29, 2025
  • TypeScript

dream-horizon-org / sentinel

Star 4

Sentinel Package Manager blocks compromised packages BEFORE installation, preventing malicious code execution. Features: Pre-install blocking, command interception (npm/yarn/pnpm/bun), 795+ blacklist (Shai-Hulud), real-time checks (OSV/GitHub/Snyk), zero dependencies, auto-updates. Counters supply chain attacks.

npm security package-manager blacklist yarn pnpm security-tools bun vulnerability-scanner malware-detection zero-dependencies dependency-security supply-chain-security npm-security shai-hulud supply-chain-attack pre-install-validation package-validation npm-worm compromised-packages
  • Updated Dec 2, 2025
  • JavaScript

thebasedcapital / pfw

Star 1

Package Firewall — self-hosted supply chain security for macOS. Intercepts npm/pip/cargo/yarn in ALL shells including AI agents. 4 vuln sources (OSV + GHSA + deps.dev + CISA KEV). Zero telemetry.

macos security package-manager firewall self-hosted cve osv sca devsecops vulnerability-scanner malware-detection lulu dependency-security supply-chain-security ai-agent-security npm-security zero-telemetry supply-chain-attack pip-security cargo-security
  • Updated Apr 1, 2026
  • TypeScript

AlaBouali / ubel

Star 1

Ubel is a fast, cross‑ecosystem security engine that resolves dependencies, generates PURLs, scans them through OSV.dev, and enforces security policies during installation to prevent supply-chain attacks. It works with: PyPI (via ubel-pip), npm (via ubel-npm),and Linux distributions (Ubuntu-based, Debian-based, RHEL, AlmaLinux).

python npm debian ubuntu redhat supply-chain kali-linux dependency-security supply-chain-security dependency-scanner almalinux supply-chain-attacks sca-scan
  • Updated Jun 4, 2026
  • JavaScript

Improve this page

Add a description, image, and links to the dependency-security topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the dependency-security topic, visit your repo's landing page and select "manage topics."

Learn more