SaaSHub helps you find the best software and product alternatives Learn more →
Top 23 Python supply-chain-security Projects
-
dep-scan
OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.
Add a CI gate. Integrate Software Composition Analysis into your pipeline. Tools like OWASP dep-scan flag unknown or newly published packages before they reach production. Generate and sign Software Bills of Materials (SBOMs) for every build so each dependency is auditable. If a package does not appear in your organization's approved registry, the build should fail.
-
AppSignal
Monitoring that respects your time & budget. APM, error tracking, and dashboards for modern web apps. Ten-minute setup, transparent flat pricing, and support from engineers who actually use the product.
-
tern
Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBOM that Tern generates will give you a layer-by-layer view of what's inside your container in a variety of formats including human-readable, JSON, HTML, SPDX and more. (by tern-tools)
-
packj
Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain
Project mention: Open Source tool to detect software supply chain attacks | news.ycombinator.com | 2026-08-30 -
blint
blint is a Binary Linter that checks the security properties and capabilities of your executables. It can also generate a Software Bill-of-Materials (SBOM) for supported binaries.
-
-
mcp-audit
See what your AI agents can access. Scan MCP configs for exposed secrets, shadow APIs, and AI models. Generate AI-BOMs for compliance.
Project mention: Show HN: APIsec MCP Audit – Audit what your AI agents can access | news.ycombinator.com | 2026-01-20 -
malicious-code-ruleset
Focused malicious code detection ruleset, with a high protection-to-noise ratio
-
Kargo
Stop Scripting Promotions. Start Shipping with Kargo. Kargo automates promotion across dev, staging, and prod with approval gates and verification. Open source, built by the team behind Argo CD. Download now.
-
Veritensor
The Anti-Virus for AI Artifacts & RAG Firewall. A static analysis tool scanning Models and Notebooks for RCE, Datasets and RAG docs for Data Poisoning, PII, and Prompt Injections. Secure your AI Supply Chain. (by arsbr)
Project mention: Recomendation for open-source tool for the AI supply chain security | news.ycombinator.com | 2026-02-09https://github.com/arsbr/Veritensor
The goal is to help teams secure the AI/ML supply chain as models, datasets, and tooling increasingly come from third parties.
What it currently does:
-
Project mention: Show HN: Beta Testing needed for my package Trustcheck | news.ycombinator.com | 2026-04-07
-
KEIP
Kernel-Enforced Install-Time Policies (KEIP): An eBPF/LSM based security tool that detects and blocks malicious network activity during pip install.Kernel-Enforced Install-Time Policies (KEIP): An eBPF/LSM based security tool that detects and blocks malicious network activity during pip install
Project mention: 56% of PyPI malware runs at install, so I sandboxed pip with eBPF | news.ycombinator.com | 2026-02-19I've been analyzing the QUT-DV25 malware dataset (14k samples) and found that a majority of malicious packages constitute a "blind spot" in typical CI pipelines: they execute payloads immediately via setup.py or post-install scripts, before any static analysis or runtime monitoring kicks in.
I built KEIP as a PoC to experiment with "install-time enforcement". It uses BPF LSM hooks to monitor the pip process tree and strictly enforces a whitelist for connect() syscalls. Anything not destined for the package repo (PyPI) gets blocked.
It successfully stopped 100% of the active C2 exfiltration attempts in the dataset I tested.
Open source (GPL). The code is a bit rough but works on kernel 5.8+ with BTF. Repo: https://github.com/Otsmane-Ahmed/KEIP ,Write-up: https://medium.com/@rafik222dz/every-pip-install-you-run-is-a-bet-you-are-making-with-your-machine-9fce4526fc8e
Curious to hear thoughts on kernel-level enforcement vs user-space sandboxing for package managers.
-
safer-dependencies
safer-dependencies is a security layer for Claude Code that audits packages before they’re added to your project. It detects and fixes risky dependencies, including CVEs, typosquats, abandoned packages, version-age issues, and adds package-cooldown violations across npm, PyPI, RubyGems, Maven, Go, and Rust.
Project mention: Safer-dependencies is a security layer for Claude Code that audits dependencies | news.ycombinator.com | 2026-08-24 -
skillfortify
First formal security scanner for AI agent skills & plugins. Static analysis, supply chain verification, SBOM generation. 22 frameworks supported including MCP, LangChain, CrewAI.
This is exactly what frameworks like SkillFortify do — automated verification of AI agent skills against 22 security frameworks before they're allowed to execute. The OpenClaw crisis would have been caught at installation time, not after 341 skills were already deployed.
-
ave
AVE - Agentic Vulnerability Enumeration. The behavioral classification standard for agentic AI components. (by aveproject)
Project mention: Show HN: Ave, a behavioral classification standard for agentic AI | news.ycombinator.com | 2026-07-21 -
gitgalaxy
An AST-free, LLM-free heuristic knowledge graph engine for deep repository intelligence. Map, secure, and modernize enterprise codebases across 50+ languages at extreme velocity
Project mention: BlAST Engine: AST-free static analyzer to auto-generate agents.md in the CI pipe | news.ycombinator.com | 2026-04-29 -
agent-audit-kit
Static scanner for MCP-connected AI agent pipelines. 330 rules across 14 categories, 12 compliance frameworks, OWASP Agentic 10/10 + MCP 10/10, GitHub Action, SARIF, public CVE-to-rule ledger.
Project mention: CVE-2026-21852: How enableAllProjectMcpServers Leaks Your Entire Source Code | dev.to | 2026-04-07I built AgentAuditKit specifically to catch this and 76 other MCP security issues.
-
Project mention: MLSecOps Practical Guide – open-source handbook for securing AI systems | news.ycombinator.com | 2026-08-13
-
code-factory
Catch AI-generated tests that could never fail; wrap agent changes in local proof and evidence. Free core; proposed evidence-gated enterprise support SLA.
Project mention: Show HN: Code Factory – Create a reviewable MVP in minutes, with receipts | news.ycombinator.com | 2026-08-05 -
Project mention: sunglasses VS Doberman-Core - a user suggested alternative | libhunt.com/r/sunglasses | 2026-09-03
-
agent-zero-trust
Zero-trust repo intake for AI coding agents — scan the instruction environment before Claude Code, Cursor, Codex, or Gemini touches a repo. Ships its own false-negative ledger.
Project mention: Show HN: Agent-zero-trust – scan a repo before your AI coding agent reads it | news.ycombinator.com | 2026-07-08 -
Project mention: Keystone – deterministic execution vault with replay‑verifiable proof | news.ycombinator.com | 2026-06-21
-
Project mention: Show HN: PgExtAssure – pre-admission security evidence for PostgreSQL extensions | news.ycombinator.com | 2026-08-22
-
mcp-shield
Security audit framework for MCP servers. 17 detectors, confidence scoring, 3 scan modes, zero dependencies. pip install mcp-shield-audit (by GaboITB)
Project mention: MCP Shield – Audit MCP servers for supply chain attacks before installing them | news.ycombinator.com | 2026-04-05 -
patchwitness
Independent trust gate for AI coding agents: verify scope, protected CI, real checks, secrets, impact, and portable Change Passports.
pipx install "https://github.com/pangxueyuan2-creator/patchwitness/releases/download/v0.1.0/patchwitness-0.1.0-py3-none-any.whl"
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Python supply-chain-security discussion
Python supply-chain-security related posts
-
I built a PR listener and a ruleset for detecting malicious code at any stage of the CI/CD
-
Are We PEP740 Yet?
-
UEFI Software Bill of Materials Proposal
-
Password-stealing Linux malware served for 3 years and no one noticed
-
Yhteiskunnan huoltovarmuus, yritysten jatkuvuussuunnitelmat ja ulkomaiset pilvipalvelut
-
Thousands of Debian packages updated from their upstream Git repository
-
A note from our sponsor - SaaSHub
www.saashub.com | 6 Sep 2026
Index
What are some of the best open-source supply-chain-security projects in Python? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | dep-scan | 1,282 |
| 2 | tern | 1,017 |
| 3 | packj | 691 |
| 4 | blint | 453 |
| 5 | PRevent | 259 |
| 6 | mcp-audit | 157 |
| 7 | malicious-code-ruleset | 149 |
| 8 | Veritensor | 85 |
| 9 | trustcheck | 79 |
| 10 | KEIP | 63 |
| 11 | safer-dependencies | 35 |
| 12 | skillfortify | 31 |
| 13 | ave | 17 |
| 14 | gitgalaxy | 15 |
| 15 | agent-audit-kit | 13 |
| 16 | MLSecOps | 6 |
| 17 | code-factory | 6 |
| 18 | sunglasses | 5 |
| 19 | agent-zero-trust | 4 |
| 20 | keystone-proof | 2 |
| 21 | pgextassure | 2 |
| 22 | mcp-shield | 2 |
| 23 | patchwitness | 2 |
Sponsored
Monitoring that respects your time & budget
APM, error tracking, and dashboards for modern web apps. Ten-minute setup, transparent flat pricing, and support from engineers who actually use the product.
www.appsignal.com