Open-source MCP server that flags day-zero supply-chain anomalies in npm + PyPI packages before install.
Free
Scanned where there is a package or repository to read, and every release diffed against the tool surface we already hold.
Open-source MCP server that flags day-zero supply-chain anomalies in npm + PyPI packages before install.