{"added":null,"apiVersion":1,"behindSince":null,"buildDepends":[],"categories":["security"],"comment":"Read-only supply-chain exposure scanner for developer endpoints","compare":null,"dependentCount":null,"description":"Bumblebee is a read-only inventory collector for package, extension, and\ndeveloper-tool metadata on developer endpoints, built to check exposure to\nknown software supply-chain compromises.\n\nIt answers a narrow supply-chain response question: when an advisory names a\npackage, extension, or version, which developer machines show a match in their\non-disk metadata right now?\n\nSBOMs help answer what shipped, and EDR helps answer what ran or touched the\nnetwork, but supply-chain response often needs a different view: messy local\nstate across lockfiles, package-manager metadata, extension manifests, and\ndeveloper-tool configurations.\n\nBumblebee turns that scattered on-disk state into structured NDJSON component\nrecords and, when given an exposure catalog, flags exact matches for fast,\nread-only exposure checks.\n\nKey properties:\n- Single static binary, zero non-stdlib dependencies\n- Three scan profiles (baseline, project, deep) for different populations\n- Reads lockfiles, package-manager install metadata, extension manifests, and\n  MCP JSON configs %e2%80%94 without executing any package manager\n- Emits NDJSON output suitable for log-ingest pipelines","flavors":[],"html":"https://daemonports.org/dragonfly/security/bumblebee/","kind":"port","lastUpdate":null,"license":["APACHE20"],"licenses":["Apache-2.0"],"maintainer":"kiwi@FreeBSD.org","name":"bumblebee","newest":true,"newestVersion":"0.1.1","noVulnData":false,"origin":"security/bumblebee","otherSystems":[{"maintainer":"kiwi@FreeBSD.org","newest":true,"origin":"security/bumblebee","path":"/security/bumblebee/","system":"FreeBSD","updated":"2026-11-11","version":"0.1.1_8"},{"maintainer":"kiwi@FreeBSD.org","newest":true,"noVulnData":true,"origin":"security/bumblebee","path":"","system":"HardenedBSD","version":"0.1.1_7"},{"maintainer":"kiwi@FreeBSD.org","newest":true,"noVulnData":true,"origin":"security/bumblebee","path":"","system":"GhostBSD","version":"0.1.1_7"}],"packages":null,"pkgName":"bumblebee-0.1.1_7","related":null,"repository":"DPorts","requiredBy":[],"requiredByCount":0,"runDepends":[],"status":null,"system":"dragonfly","systemLabel":"DragonFly","version":"0.1.1_7","versions":[{"date":"2026-11-11","version":"0.1.1"}],"vulnerabilities":null,"www":"https://github.com/perplexityai/bumblebee"}