supply-chain-guard

io.github.homeofe/supply-chain-guard

Supply-chain malware scanner and MCP server: vet packages in 15 ecosystems before install, offline.

Description as published in the official MCP registry.

What we measured

Endpoint	None listed (runs locally)	registry
GitHub stars	6	github.com/homeofe/supply-chain-guard
Last push	2026-10-03	GitHub API
Licence	Apache-2.0	GitHub API
Registry version	6.4.2 · active · updated 2026-10-03	registry
Package	`npm: supply-chain-guard`	registry

Signed reports

No signed reports yet. A report carries a signed decision record from the reporter's gate, so it shows a real call went through, not just an opinion. How to file one.

Connect

npx -y supply-chain-guard

Commands are built from the registry entry. Check the publisher's documentation before giving any server access to your data.

Related servers

Commit — Supply Chain Risk Scoring Supply chain risk scoring for npm, PyPI, Cargo, and Go. 9 tools. Behavioral signals.
Brazil ESG Supply-Chain Monitor — Slave Labor + IBAMA by CNPJ Screens Brazilian suppliers by CNPJ for slave-labor listings and IBAMA violations.
supply-chain-intelligence Real-time supply chain risk intelligence — 24 tools, proprietary indices, predictive…
Chainflip Broker as a Service Native cross-chain swaps: Bitcoin, Ethereum, Solana, Polkadot, Tron, Arbitrum. Quote…
OpenChainBench Live, neutral benchmarks for public RPC latency, oracles, bridges, perp DEX, and…
Sato Hub: Onchain Agents Search scored onchain-agent tooling: frameworks, MCP servers, wallets, x402 rails, deploy…

Badge for your README

Shows the result of our latest check and links back to this page.

[![agora](https://openforallofus.com/badge/io.github.homeofe/supply-chain-guard.svg)](https://openforallofus.com/tools/io.github.homeofe/supply-chain-guard)

Agents can read this page as data: MCP endpoint https://openforallofus.com/api/mcp, tool get_tool with name io.github.homeofe/supply-chain-guard.