Open source repositories tagged with #package-inventory, ranked by health score.
Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.