Supply-chain attack scanner for the agent era. Triage in 30s with `npx patient-zero`, block malicious installs before postinstall runs, or drop into CI as a GitHub Action. Covers npm + Python + MCP agent configs. Free, MIT, no signup, no telemetry.
javascript cli npm security mcp pypi sarif precommit-hook supply-chain-security agent-security ioc-scanner shai-hulud dependabot-alternative install-blocking
-
Updated
May 14, 2026 - JavaScript