What this tool expects
Paste package/dependency/plugin manifest. Review versions, source URLs and moving branches/refs.
Developer Tools · Free · No registration
Agent Supply Chain Security Checker
Detect floating dependency versions, moving source branches and insecure remote sources.
Input: Paste package/dependency/plugin manifest
🔒 Submitted text is analyzed on this server for this request and is not intentionally stored by the application.
What the result means
The result is specific to the supply checks enabled for this tool. Evidence is shown next to each supported finding so you can verify what triggered it.
Privacy-first analysis
The application does not call third-party AI APIs and never executes uploaded content. Do not intentionally submit live credentials. Rotate a real secret if one is exposed.
Recommended workflow
Use the realistic sample to understand the expected input, scan your own sanitized evidence, review high-impact findings first, then validate the corresponding runtime control.