supply-chain-monitor: Flag Suspicious PyPI and npm Releases
Monitors popular PyPI and npm packages, compares new releases with their predecessors, and uses Cursor Agent CLI to assess suspicious changes. Fits teams that can run the monitor with Cursor authentication and want optional Slack alerts.
QuietHealth 20/100
