Semgrep Supply Chain finds and fixes vulnerabilities in open-source dependencies and blocks malicious packages with a Malware Firewall on developer machines.
Let us know what you think
