bumblebee
Read-only developer endpoint scanner for on-disk package
bumblebee is a read-only developer endpoint scanner for finding software supply-chain exposure on macOS and Linux machines. It collects on-disk metadata from package managers, lockfiles, editor extensions, browser extensions, and supported developer tool configurations. The tool is designed for incident response situations where a team already knows a suspicious package, extension, or version and needs to identify which machines may contain it. It emits structured NDJSON records so results...