bumblebee

bumblebee is a read-only developer endpoint scanner for finding software supply-chain exposure on macOS and Linux machines. It collects on-disk metadata from package managers, lockfiles, editor extensions, browser extensions, and supported developer tool configurations. The tool is designed for incident response situations where a team already knows a suspicious package, extension, or version and needs to identify which machines may contain it. It emits structured NDJSON records so results can be processed by scripts, security pipelines, or fleet inventory systems. Bumblebee avoids running package managers or reading source files, which keeps the scan focused and low-impact. It is useful for security teams that need fast local visibility across messy developer environments.