Repositories list

• docs

  Public
  MDX

  •0•0•2•0•Updated Mar 20, 2026Mar 20, 2026

• gryph

  Public
  The AI coding agent audit trail tool

  securityai-agentsai-developer-tools+ 2

  securityai-agentsai-developer-toolsgemini-cliclaude-code

  Go

  •

  Apache License 2.0

  •5•76•5•0•Updated Mar 19, 2026Mar 19, 2026

• dry

  Public
  Do not repeat yourself. Re-usable utils for Go apps

  Go

  •

  Apache License 2.0

  •0•3•4•1•Updated Mar 18, 2026Mar 18, 2026

• homebrew-tap

  Public
  Ruby

  •0•0•0•0•Updated Mar 13, 2026Mar 13, 2026

• vet

  Public
  Protect against malicious open source packages 🤖

  golangnpmsecurity+ 8

  golangnpmsecurityrubygemsstatic-analysispypihacktoberfestdevsecopssoftware-composition-analysispolicy-as-code+ 1

  Go

  •

  Apache License 2.0

  •91•979•80•15•Updated Mar 11, 2026Mar 11, 2026

• pmg

  Public

  safedep/pmg’s past year of commit activity
  PMG protects developers from getting hacked by malicious open source packages. Stop the next Shai-Hulud or S1ngularity before it happens.

  open-sourcenpmdeveloper-tools+ 5

  open-sourcenpmdeveloper-toolshacktoberfestpnpmdevsecopsmalicious-codesupply-chain-security

  Go

  •

  Apache License 2.0

  •13•126•12•0•Updated Mar 11, 2026Mar 11, 2026

• code

  Public
  SafeDep Code Analysis Framework

  Go

  •

  Apache License 2.0

  •1•2•6•0•Updated Feb 24, 2026Feb 24, 2026

• vet-action

  Public

  safedep/vet-action’s past year of commit activity
  GitHub Action for policy driven vetting of open source dependencies

  devsecopssoftware-composition-analysispolicy-as-code+ 1

  devsecopssoftware-composition-analysispolicy-as-codesupply-chain-security

  TypeScript

  •

  Apache License 2.0

  •2•12•8•6•Updated Feb 23, 2026Feb 23, 2026

• .github

  Public
  1•0•0•1•Updated Feb 12, 2026Feb 12, 2026

• vet-bitbucket-pipe

  Public
  Bitbucket Pipe for vet

  Shell

  •

  Apache License 2.0

  •0•1•0•0•Updated Feb 10, 2026Feb 10, 2026

• pypi-test-package

  Public
  Test package for various pypi registry access requirements

  Python

  •0•0•0•0•Updated Feb 9, 2026Feb 9, 2026

• xbom

  Public
  Generate xBOMs enriched with AI, SaaS, Crypto and more using Static Code Analysis

  static-analysishacktoberfestsbom+ 2

  static-analysishacktoberfestsbomcyclonedxaibom

  Go

  •

  Apache License 2.0

  •3•28•9•1•Updated Jan 22, 2026Jan 22, 2026

• vet-gitlab-ci-component

  Public
  GitLab CI/CD Component for https://github.com/safedep/vet

  Apache License 2.0

  •0•1•5•0•Updated Jan 21, 2026Jan 21, 2026

• skills

  Public
  Agents Skills for Software Supply Chain Security

  Apache License 2.0

  •0•0•0•0•Updated Jan 21, 2026Jan 21, 2026

• ptyx

  Public
  Cross-platform TTY utilities (macOS, Linux, Windows, WSL)

  Go

  •

  MIT License

  •1•0•0•0•Updated Jan 20, 2026Jan 20, 2026

• npm-test-package

  Public
  Test package for various npm registry access requirements

  Shell

  •0•0•0•0•Updated Jan 17, 2026Jan 17, 2026

• vetpkg.dev

  Public
  Open Source Component Security Dashboard

  securityanalyticssoftware-composition-analysis+ 1

  securityanalyticssoftware-composition-analysissupply-chain-security

  TypeScript

  •

  Apache License 2.0

  •0•1•7•2•Updated Dec 19, 2025Dec 19, 2025

• platform.safedep.io

  Public archive
  SafeDep Platform Frontend

  TypeScript

  •

  Apache License 2.0

  •2•2•6•1•Updated Dec 15, 2025Dec 15, 2025

• safedep.github.io

  Public
  SafeDep Website

  0•0•0•1•Updated Oct 9, 2025Oct 9, 2025

• shai-hulud-migration-response

  Public
  Shai-Hulud Migration Response

  Shell

  •

  Apache License 2.0

  •1•6•0•0•Updated Sep 25, 2025Sep 25, 2025

• pinner-mcp

  Public
  Model Context Protocol (MCP) server to pin components to their immutable version

  Go

  •

  Apache License 2.0

  •5•12•0•0•Updated Sep 5, 2025Sep 5, 2025

• examples

  Public
  Example code for using SafeDep API and SDKs

  Go

  •

  Apache License 2.0

  •0•0•0•0•Updated Aug 8, 2025Aug 8, 2025

• upkube

  Public
  Minimal Kubernetes Deployment Manager

  templ

  •

  Apache License 2.0

  •0•0•0•0•Updated Jul 4, 2025Jul 4, 2025

• docs.safedep.io

  Public archive
  SafeDep Documentation Portal

  JavaScript

  •

  Apache License 2.0

  •3•1•1•1•Updated Jun 12, 2025Jun 12, 2025

• demo-client-python

  Public
  Intentionally vulnerable Python app for testing vet

  Python

  •

  Apache License 2.0

  •6•0•0•1•Updated Mar 10, 2025Mar 10, 2025

• vet-demo

  Public
  Try vet yourself in your browser

  Shell

  •

  Apache License 2.0

  •0•0•0•0•Updated Mar 10, 2025Mar 10, 2025

• api-examples

  Public
  SafeDep API Client Examples

  TypeScript

  •

  Apache License 2.0

  •0•0•0•0•Updated Mar 2, 2025Mar 2, 2025

• ghcp

  Public
  GitHub Comments Proxy Service

  Go

  •

  Apache License 2.0

  •0•0•0•0•Updated Feb 20, 2025Feb 20, 2025

• demo-client-java

  Public
  Java Springboot Demo App

  Java

  •

  Apache License 2.0

  •2•0•0•3•Updated Jul 23, 2024Jul 23, 2024

• go-sarif

  Public
  Go library for sarif - Static Analysis Results Interchange Format

  Go

  •

  The Unlicense

  •26•0•0•0•Updated Jun 19, 2024Jun 19, 2024