Skip to content
#

dependabot-alternative

Star

Here are 3 public repositories matching this topic...

Language: All
Filter by language
All 3 JavaScript 2 Python 1

0xSteph / patient-zero

Sponsor
Star 4

Supply-chain attack scanner for the agent era. Triage in 30s with `npx patient-zero`, block malicious installs before postinstall runs, or drop into CI as a GitHub Action. Covers npm + Python + MCP agent configs. Free, MIT, no signup, no telemetry.

javascript cli npm security mcp pypi sarif precommit-hook supply-chain-security agent-security ioc-scanner shai-hulud dependabot-alternative install-blocking
  • Updated Jun 9, 2026
  • JavaScript

Improve this page

Add a description, image, and links to the dependabot-alternative topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the dependabot-alternative topic, visit your repo's landing page and select "manage topics."

Learn more