supply-chain — independent software & tools
-
action-pin-check
Audit GitHub Actions workflows for mutable or missing action pins.
-
npm-safe
本地优先的 npm 包供应链安全扫描引擎:静态与 LLM 分析、CLI、桌面 GUI、CI 集成。
-
gurgl
Local-first egress hygiene for MCP servers: capture, diff, and allowlist what your AI-agent tools contact on the network.
-
remnant
Deterministic npm artifact admission for local and CI supply-chain checks.
-
MCPScan
Scan and identify security issues in MCP servers to help strengthen defenses against potential attacks on AI agent connections.
-
authichain-unified
Multi-tenant blockchain authentication platform — AI-powered product verification (GPT-4 Vision), NFT certificates on Polygon, QR-based supply chain tracking, and autonomous revenue pipelines across 10 industry verticals. Built on Next.js, Cloudflare Workers, and Supabase.