safedep/vet

vet is a software supply-chain security tool that examines open-source packages for malware, vulnerabilities, license issues, and policy violations. Developers use it to scan package manifests, repositories, container images, or SBOMs and to enforce security policies in CI/CD systems.