repotify
GitHub

Supply-Chain Risk Auditor (Trail of Bits)

supply-chain-risk-auditor · tier mission · source repo · CC-BY-SA-4.0

caution

Audits dependencies for advisories, abandoned upstreams, publisher concentration and install-time scripts.

Test results

0.90 jury mean

quality
0.90
specificity
1.00
maintenance
0.80
Jury agreement
80%
Scored
2026-10-04
Score expires
2026-11-03

Scores are valid for 30 days (the same TTL as the pipeline's expensive scoring layer). After that this page marks them expired until the catalog is rebuilt.

Jury models

  • nvidia/nemotron-3-ultra-550b-a55b
  • google/gemma-4-31b-it
  • openai/gpt-oss-20b

Security scan

Level
caution
Scanned at
2026-10-03
Findings
2
Upstream commit
82fe82262526
Description length
367 chars
Files fingerprinted
13

Capabilities

  • supply-chain-audit

Stacks

  • *

Pairs with

  • dependencies
  • security

Community experiences

What actually happened when you used this skill. No stars, no ratings — just experience reports.

Local prototype: your comment is stored in this browser only — other visitors cannot see it. The queue below is a moderation simulation (try it with ?demo=moderation in the URL); in production a human moderator approves via signed entries shipped with the site build.

Loading…

Share your experience

Prototype: stored in this browser only, pending moderation. See the moderation design.

Moderation queue (local prototype)

Empty.