Developer tools / Commit — Supply Chain Risk Scoring

Commit — Supply Chain Risk Scoring

io.github.piiiico/proof-of-commitment · v1.36.0

Supply chain risk scoring for npm, PyPI, Cargo, and Go. 9 tools. Behavioral signals.

Description supplied by the publisher in the MCP Registry. We have not tested this server.

GitHub repositoryWebsite

Install

npx -y proof-of-commitment

Assembled from the package metadata in the official MCP Registry (including any subcommand or flag the publisher lists). Some publishers do not list the subcommand that starts MCP mode, so confirm the command in the README, along with any required configuration and credentials, before connecting it to real data.

Offers a hosted remote endpoint: https://poc-backend.amdal-dev.workers.dev/mcp (streamable-http). No local install needed.

Signals

GitHub stars8
npm weekly downloads41
Last push11d ago
LicenceMIT
Open issues0
SECURITY.mdNo
LanguageTypeScript
Latest version published2026-06-20

Signals captured from GitHub, npm and the official MCP Registry on October 15, 2026. See the scoring method.

Similar servers

supply-chain-guard

Score 87

Supply-chain malware scanner and MCP server: vet packages in 15 ecosystems before install, offline.

★ 7↓ 1,992/wkApache-2.0pushed 3d ago
Developer toolsSecurity

k8s AIops

Score 75

Governed Kubernetes ops — 55 MCP tools with audit, budget, undo, risk-tier audit labels.

★ 0MITpushed 2d ago
Developer tools

git-mcp-server

Score 74

Comprehensive Git MCP server enabling native git tools including clone, commit, worktree, & more.

★ 241Apache-2.0pushed 20d ago
Developer tools