Perplexity AI has released Bumblebee, an open‑source, read‑only supply chain scanner designed to detect malicious or suspicious dependencies across multiple package ecosystems, including npm, PyPI, Go modules, RubyGems, Composer, and even editor extensions. Built with Go 1.25+, Bumblebee operates without requiring non‑standard libraries, making it lightweight and easy to integrate into existing development workflows.
The tool’s launch addresses rising concerns over software supply chain attacks, offering developers a free, community‑maintained option to audit their codebases. By supporting a wide range of package managers, Bumblebee aims to become a universal safeguard, fostering greater transparency and resilience in open‑source software development.
This story was written by a language model from reporting by Firecrawl. Check the original before quoting it.