Last released Aug 11, 2026
Static supply-chain checks for npm and PyPI packages, lockfiles, provenance, and known malware.