ended7월 2일· 1 sources
An SBOM Proves What You Installed. It Can't Prove You Should Have.
Why it matters
A pre-install supply-chain gate returns ALLOW or DENY for each package your AI agent proposes, before npm install runs, keyed on provenance: is the name in a vouched snapshot or a popular baseline, an...
1
Sources
+0
24h
—
Growth
81d
Active