Developer tools / Commit — Supply Chain Risk Scoring

Commit — Supply Chain Risk Scoring

io.github.piiiico/proof-of-commitment · v1.36.0

Supply chain risk scoring for npm, PyPI, Cargo, and Go. 9 tools. Behavioral signals.

Install

npx -y proof-of-commitment

Typical command from the package name. Check the README for required configuration and credentials before connecting it to real data.

Offers a hosted remote endpoint (streamable-http, stdio). No local install needed.

Signals

GitHub stars8
npm weekly downloads41
Last push9d ago
LicenceMIT
Open issues0
SECURITY.mdNo
LanguageTypeScript
Latest version published2026-06-20

Signals captured from GitHub, npm and the official MCP Registry on October 15, 2026. See the scoring method.

Similar servers

supply-chain-guard

Score 88

Supply-chain malware scanner and MCP server: vet packages in 15 ecosystems before install, offline.

★ 7↓ 1,992/wkApache-2.0pushed 1d ago
Developer toolsSecurity

mcp-gtm-suite

Score 77

21 Mamba Labs account-intelligence MCP tools in one server: identity, signals, ICP. Clay-ready.

★ 2MITpushed 3d ago
Developer tools

k8s AIops

Score 75

Governed Kubernetes ops — 55 MCP tools with audit, budget, undo, risk-tier audit labels.

★ 0MITpushed today
Developer tools