dependabot-alternative — independent software & tools

1 independent dependabot-alternative listing the big search engines bury.

• patient-zero

  github · Free · by 0xSteph

  Supply-chain attack scanner for the agent era. Triage in 30s with `npx patient-zero`, block malicious installs before postinstall runs, or drop into CI as a GitHub Action. Covers npm + Python + MCP agent configs. Free, MIT, no signup, no telemetry.