Supply Chain Risk Auditor
84/100
@trailofbitsIdentifies dependencies at heightened risk of exploitation or takeover. Use when assessing supply chain attack surface, evaluating dependency health, or scoping security engagements.
Reviewed on v2026-05-16 - latest is v0.3.1. Scores may not reflect the current version.
Review Scores
Security31/35
Maintain.29/35
Usability24/30
Evidence:
high
Reviewed May 27, 2026Newer version available
Reviewed Version
2026-05-16
Latest Version
0.3.1(drift)
Newer version available
The review covers 2026-05-16; the latest version is 0.3.1. Recheck changes before installing.
Scores reflect the version reviewed and may change with updates.
Security Audit - No Flags Reported
Audited May 27, 2026More by Trail of Bits
- Static Analysis SkillSkill90/100
- Variant AnalysisSkill90/100
- Constant Time AnalysisSkill90/100
- Semgrep AnalysisSkill90/100