はてなブックマーク - GitHub - perplexityai/bumblebee: Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises. https://b.hatena.ne.jp/entry/s/github.com/perplexityai/bumblebee Bumblebee is a read-only inventory collector for package, extension, and developer-tool metadata on macOS and Linux developer endpoints. It answers a narrow supply-chain response question: when an ... igrep https://b.hatena.ne.jp/igrep/20260602#bookmark-4787759816094037570 2026-06-01T21:21:02Z security パッケージ管理 kazuya-mitsutani https://b.hatena.ne.jp/kazuya-mitsutani/20260601#bookmark-4787759816094037570 2026-06-01T10:54:50Z kasumigasekix https://b.hatena.ne.jp/kasumigasekix/20260601#bookmark-4787759816094037570 2026-05-31T21:34:03Z warufuzaketaichi https://b.hatena.ne.jp/warufuzaketaichi/20260601#bookmark-4787759816094037570 2026-05-31T15:52:36Z fumikony https://b.hatena.ne.jp/fumikony/20260601#bookmark-4787759816094037570 2026-05-31T15:40:09Z あとで読む stefafafan https://b.hatena.ne.jp/stefafafan/20260601#bookmark-4787759816094037570 2026-05-31T15:35:51Z security tmatsuu https://b.hatena.ne.jp/tmatsuu/20260531#bookmark-4787759816094037570 各種パッケージシステムの依存関係などのmetadataを収集するツール。SBOMで管理できない範囲を扱うためかな。npm系、pypi、go、rubygems、composerなどの言語系のほか、mcp、vscode拡張、ブラウザ拡張、homebrewにも対応。 2026-05-31T14:46:46Z nishitki https://b.hatena.ne.jp/nishitki/20260524#bookmark-4787759816094037570 2026-05-23T20:50:05Z