supply-chain-sentinel

one supply-chain gate

One supply-chain gate for npm projects: risky dependency changes, licence policy, SBOM drift and GitHub Actions hardening, in one report.

• GitHub
• 259/week
• 1★
• MIT
• v1.0.0
• Supply Chain

Read the full README on GitHub (opens in a new tab)

• package-tripwire

  flag risky dependency changes

• license-sentinel

  enforce licence policy

• workflow-sentinel

  pin GitHub Actions by SHA