Skip to content

perplexityai/bumblebee

Secrets & Credentials

Read-only inventory collector that turns on‑disk package, extension, and developer‑tool metadata into structured NDJSON records for quick supply‑chain exposure checks on macOS and Linux.

Go Latest v0.1.2 · 1mo ago Security brief →

Features

  • Collects lockfiles, package‑manager metadata, extension manifests, and MCP configs as structured NDJSON component records
  • Three scan profiles (`baseline`, `project`, `deep`) for lightweight recurring inventory or deep on‑demand checks
  • Zero non‑stdlib dependencies; single static Go binary with versioned build information

Recent releases

View all 2 releases →
Monitor
v0.1.2 New feature

Laravel Lang + threat intel + ecosystem tools

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
4,805
Forks
431
Language
Go
Downloads/week
42 ↓60%
NPM Maintainers
1 Single npm maintainer
Contributors
4

Install & Platforms

Install via
go
Platforms
linux macos

Beta — feedback welcome: [email protected]