Self-hosted permission-aware context layer. Search returns only what the caller may read.
Free
Scanned where there is a package or repository to read, and every release diffed against the tool surface we already hold.