jlevy/supply-chain-hardening

Supply-chain payloads run at install, import, or repo-open time. Copy-pasteable hardening playbooks, zero-dep audit scripts, and an incident watch list for all three moments — npm, PyPI, crates.io, Go, CI/CD, and AI agent workspaces.

5Stars on the repository
6Mods indexed here, across every type
27d agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown

jlevy/supply-chain-hardening

Settings file Claude Code

One of 4 in settings.json

Agent settings declaring 3 hook events (SessionStart, PostToolUse, PreCompact).

not rated 5 27d ago A tokens not measured copy · 94% MIT