Libraries tagged by supply-chain

Sign artifacts and attestations with Sigstore from PHP — sign, log to Rekor, timestamp, and assemble a bundle

Go to Download

Inventory management module for FlowRise HMS providing stock tracking, expiry management, and supply chain operations.

Go to Download

A minimal package used to validate Aikido's Packagist firewall rules and supply chain security detection.

Go to Download

A API SDK for gwlp supply chain

Go to Download

Nexus SupplyChainOperations Orchestrator - Coordinating end-to-end supply chain flows from procurement to fulfillment

Go to Download

Composer plugin that enforces exact x.y.z versions on composer require (no range operators)

Go to Download

Pre-install / pre-upgrade CVE gate for Composer. Blocks before post-install scripts run.

Go to Download

Composer plugin that requires confirmation before a full 'composer update'. Protects teams from accidental full dependency updates and supply-chain attacks. Targeted updates (composer update vendor/package) stay allowed.

Go to Download

GS1 EPC编码解码库 - 支持SGTIN、GDTI等多种EPC方案

Go to Download

Pure-PHP SSHSIG signing and verification, compatible with ssh-keygen -Y

Go to Download

Parse, verify and sign signed notes — the transparency-log / Go sumdb format used by Sigstore Rekor checkpoints — in PHP

Go to Download

Read, write and canonicalize OpenVEX documents in PHP

Go to Download

CLI tool to audit project dependencies (Composer & npm) for known vulnerabilities and tell whether an available update actually leaves the vulnerable range.

Go to Download

The connector makes things simplier when integrating with the DFC.

Go to Download

Cache-first, SEO-first, AI-native PHP application framework.

Go to Download