A Git-native dependency admission controller. Evaluates trust signals on every dependency change and blocks commits or builds when packages fail your team's policy. Pre-commit hook + CI gate with built-in approval workflow.
cli opensource devtools ci-cd provenance git-hooks lockfile dependency-management admission-controller slsa supply-chain-security npm-security
-
Updated
Apr 18, 2026 - JavaScript