By clicking “Accept”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. View our Privacy Policy for more information.
DenyAccept
18px_cookie
e-remove
Research > Supply Chain Risk Hub

Supply Chain Risk Hub

Track risk in the AI models and open source packages entering your codebase through dependencies. Updated as new threats are identified.

Abstract geometric pattern featuring overlapping hexagons. Central hexagon in pink contrasts with surrounding green hexagons on a dark background.
Packages
2996
AI Models
3000
2996
Sort by Risk Level
Sort by Date
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Packages

10
Low Risk
October 20, 2026

transformation-matrix-js

npm
10
Low Risk
October 20, 2026

tree-sync

npm
10
Low Risk
October 20, 2026

find-project-root

npm
10
Low Risk
October 20, 2026

ember-cli-get-dependency-depth

npm
10
Low Risk
October 20, 2026

loader-fs-cache

npm
10
Low Risk
October 20, 2026

basic-auth-parser

npm
10
Low Risk
October 20, 2026

moniker

npm
10
Low Risk
October 20, 2026

cover

npm
10
Low Risk
October 20, 2026

standalone-react-addons-pure-render-mixin

npm
3000
Sort by Risk Level
Sort by Downloads
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

AI Models

Low Risk
242677197 downloads
4

sentence-transformers/all-MiniLM-L6-v2

Low Risk
86477450 downloads
8

cross-encoder/ms-marco-MiniLM-L6-v2

Low Risk
66444409 downloads
10

nesaorg/benchmark_v0

Low Risk
63262721 downloads
8

BAAI/bge-small-en-v1.5

Low Risk
46262071 downloads
4

google/electra-base-discriminator

Low Risk
45537597 downloads
8

sentence-transformers/paraphrase-multilingual-MiniLM-L12-v2

Low Risk
41713428 downloads
4

google-bert/bert-base-uncased

Low Risk
36143759 downloads
4

BAAI/bge-m3

Low Risk
30037022 downloads
8

Qwen/Qwen3-0.6B

AI MODEL GOVERNANCE

Secure and manage AI risks in the software supply chain

Book a Demo

Latest Research

CVE-2026-25896: Entity Encoding Bypass in fast-xml-parser
Read now
AI SAST Finding: Path Traversal in OpenClaw via LLM Guardrail Bypass
Read now

Get a Demo

AI MODEL GOVERNANCE

Secure and manage AI risks in the software supply chain

Book a Demo

Discover, assess, and govern AI components

AI models and services are the new dependencies in your software supply chain. Continuously discover what’s running in your code, assess each component for risk, and integrate governance into existing workflows—without slowing innovation.
Dashboard showing a list of 7 found AI models with categories and colored status circles.
1
Detect AI models and services

Detect open source AI models and third-party AI services like ChatGPT and Claude used in your applications.

Dashboard showing search results with seven AI models listed under category filter.
2
Evaluate AI models for risk

Screen open source AI models from Hugging Face for security, licensing, and other operational risks.

User interface screen for defining a policy with severity, dependency, reachability, and action options.
3
Enforce guardrails

Set organization-wide policies governing the safe adoption and usage of AI models and third-party services.

See for yourself why Endor Labs is the fastest growing AppSec company ever

This is some text inside of a div block.