Supply Chain

Retained excerpt

Supply Chain Developer endpoint inventory in 10 minutes: Bumblebee Hive Oluwatobi Afolabi shares Bumblebee Hive, a fork of Perplexity AI's on-disk package scanner Bumblebee (covered in issue #333) that adds a fleet inventory system UI. Bumblebee scans for the packages developers have installed on their machines across npm, PyPI, Go packages, VS Code extensions, browser add-ons, and MCP server configs, and Hive adds an ingest server and React dashboard where you can view the results. 💡 Neat to see the quick iteration from Perplexity open sourcing Bumblebee. I’m optimistic about more “benefit of the commons” from companies open sourcing interesting security tools/ideas → coding agents can rapidly extend or customize to another company’s environment. Also tip from Prabhu S: You can run cdxgen with "-t os" from each dev's machine and collect what is installed, running, and configured with Dependency Track. Introducing GuardDog 3.0: A new rules engine, transparent sandboxing, and more…

This limited excerpt is retained to explain the source trail. Rights remain with the original publisher.