Open source supply-chain-security projects
Every project in the registry tagged supply-chain-security, ranked by real GitHub adoption.
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in
Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious
safely install npm packages by auditing them pre-install stage
Frequently asked questions
How many open source supply-chain-security projects are there?
This registry tracks 3 projects tagged supply-chain-security, with 28,460 GitHub stars between them. The most-adopted is SkillSpector at 23,886 stars.
Are these supply-chain-security projects free to use?
Yes — 3 of the 3 carry an explicit open-source licence across 2 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.
Which supply-chain-security project should I choose?
The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.
Are these supply-chain-security projects still maintained?
3 of the 3 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.