Show HN: ForgeGuardian – Open-source software supply-chain security scanner

ForgeGuardian is an open-source software supply-chain security scanner designed to identify threats beyond those detected by regular CVE scanning. It aims to solve problems such as malicious packages, typosquatting, dependency attacks, behavioral threats, malware, and AI-related threats. The tool includes 8 detection engines, supports 9 ecosystems, and has over 223 detection signatures. It also features CLI and web dashboards, offline functionality, and policy enforcement capabilities. ForgeGuardian provides prevention and quarantine measures, as well as CI/CD webhooks. The developers are seeking feedback from users on the tool.