Tag

package-registry-risk

Safeguard articles tagged "package-registry-risk" — guides, analysis, and best practices for software supply chain and application security.

1 article

AI Security

AI agent skills and plugin repositories: why they need th...

AI agent skills and MCP plugins are packages in disguise—executable, publicly registered, and largely ungoverned. Here's why they need npm-grade supply chain controls.

May 30, 20268 min read