Protect against malicious open source packages 🤖
vet is a software supply-chain security tool that examines open-source packages for malware, vulnerabilities, license issues, and policy violations. Developers use it to scan package manifests, repositories, container images, or SBOMs and to enforce security policies in CI/CD systems.
This repository also configures its own agents. See what vet tells them →
Cursor rule Cursor
Always use vet-mcp to vet any open source library package suggested by AI generated code before installation. Follow the rules below to use vet-mcp.