bumblebee

Bumblebee is a read-only scanner that analyzes on-disk metadata from packages, extensions, and developer tools to detect exposure to known software supply-chain compromises. It is designed for security engineers and developers who need to quickly audit their local environments without modifying files or relying on network-based checks. Its interesting value lies in its offline, non-invasive approach to identifying supply-chain risks, making it a practical tool for proactive defense against tampered dependencies.