SafeDep vet-mcp helps in vetting open source packages for security risks—such as vulnerabilities and malicious code—before they're used in your project, especially with AI-generated code suggestions.
A MCP server for pinning GitHub Actions and container base images to their immutable SHA hashes to prevent supply chain attacks.