Local-first supply-chain security gate for npm/pnpm/bun: typosquat, release age, provenance checks
Free
Scanned where there is a package or repository to read, and every release diffed against the tool surface we already hold.
Local-first supply-chain security gate for npm/pnpm/bun: typosquat, release age, provenance checks