jlevy/supply-chain-hardening

Supply-chain payloads run at install, import, or repo-open time. Copy-pasteable hardening playbooks, zero-dep audit scripts, and an incident watch list for all three moments — npm, PyPI, crates.io, Go, CI/CD, and AI agent workspaces.

5Stars on the repository
6Mods indexed here, across every type
28d agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown

jlevy/supply-chain-hardening

Instructions file CodexOpenCode

Instructions for jlevy/supply-chain-hardening, covering agents.md, common intents, safety rule for agents, untrusted repos and repo-supplied agent config is untrusted input.

not rated 5 28d ago B 1,947 tokens original MIT