Developer tools / Commit — Supply Chain Risk Scoring
Commit — Supply Chain Risk Scoring
io.github.piiiico/proof-of-commitment · v1.36.0
Supply chain risk scoring for npm, PyPI, Cargo, and Go. 9 tools. Behavioral signals.
Install
npx -y proof-of-commitmentTypical command from the package name. Check the README for required configuration and credentials before connecting it to real data.
Offers a hosted remote endpoint (streamable-http, stdio). No local install needed.
Signals
| GitHub stars | 8 |
| npm weekly downloads | 41 |
| Last push | 9d ago |
| Licence | MIT |
| Open issues | 0 |
| SECURITY.md | No |
| Language | TypeScript |
| Latest version published | 2026-06-20 |
Signals captured from GitHub, npm and the official MCP Registry on October 15, 2026. See the scoring method.
Similar servers
supply-chain-guard
Score 88Supply-chain malware scanner and MCP server: vet packages in 15 ecosystems before install, offline.
mcp-gtm-suite
Score 7721 Mamba Labs account-intelligence MCP tools in one server: identity, signals, ICP. Clay-ready.
k8s AIops
Score 75Governed Kubernetes ops — 55 MCP tools with audit, budget, undo, risk-tier audit labels.