dependencies & supply chain
finds vulnerable or yanked dependencies and opens the smallest fix.
- status
- optional ships with colonizer, off until you switch it on.
- version
- ships with the harness
- licence
- mit (part of the harness)
- docs
- loops
what it does for you
scanners already on your machine read each repository’s lockfiles from the mothership’s own copy, never inside a colony. for what they find, a colony opens a pull request with the minimal bump and nothing else.
it never downloads or runs a scanner you have not installed.
what it needs
- repositories you add to its allowlist
- optionally cargo-audit, npm or osv-scanner on the machine
how to turn it on
loops → dependencies & supply chain → switch it on and add repositories. daily once on; dry run shows what it would do.
how far it has been tested
released in v0.1.11. this site does not record a run on a real machine.