Open source / Guard/Tripwire / supply-chain-sentinel

supply-chain-sentinel

One supply-chain gate for npm projects: runs package-tripwire (risky dependency changes), license-sentinel (license policy), sbom-diff-sentinel (new vulnerabilities and S