Skip to content

perplexityai/bumblebee

Secrets & Credentials

A read‑only inventory collector that turns on‑disk package, extension, and developer‑tool metadata from macOS/Linux endpoints into structured NDJSON for rapid supply‑chain exposure checks.

Go Latest v0.1.1 · 12d ago Security brief →

Features

  • Collects metadata from lockfiles, package managers, extensions, and MCP configs without executing any commands
  • Three scan profiles (`baseline`, `project`, `deep`) to suit different cadences and scopes
  • Emits NDJSON component records that can be matched against an exposure catalog for fast incident response

Recent releases

View all 1 releases →

No releases yet

We'll surface new releases as they're published — check back soon.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
4,060
Forks
349
Language
Go
Downloads/week
231
NPM Maintainers
1 Single npm maintainer
Contributors
1

Install & Platforms

Install via
go
Platforms
linux macos

Beta — feedback welcome: [email protected]