security/bumblebee 0.1.1_7 FreeBSD
Read-only supply-chain exposure scanner for developer endpoints
- System
- FreeBSD
- Repository
- FreeBSD ports
- Maintainer
- [email protected]
- Last update
- Commit
d81b7ba3c3- License
- APACHE20
- Categories
- security
- Package size
- 2358.3 KiB, 6947.3 KiB installed
Description
Bumblebee is a read-only inventory collector for package, extension, and developer-tool metadata on developer endpoints, built to check exposure to known software supply-chain compromises.
It answers a narrow supply-chain response question: when an advisory names a package, extension, or version, which developer machines show a match in their on-disk metadata right now?
SBOMs help answer what shipped, and EDR helps answer what ran or touched the network, but supply-chain response often needs a different view: messy local state across lockfiles, package-manager metadata, extension manifests, and developer-tool configurations.
Bumblebee turns that scattered on-disk state into structured NDJSON component records and, when given an exposure catalog, flags exact matches for fast, read-only exposure checks.
Key properties:
- Single static binary, zero non-stdlib dependencies
- Three scan profiles (baseline, project, deep) for different populations
- Reads lockfiles, package-manager install metadata, extension manifests, and MCP JSON configs — without executing any package manager
- Emits NDJSON output suitable for log-ingest pipelines
Install
Binary package:
pkg install bumblebeeFrom the ports tree:
cd /usr/ports/security/bumblebee/ && make install cleanTo depend on this port in another port's Makefile:
RUN_DEPENDS= bumblebee>0:security/bumblebeePackages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | aarch64 | amd64 | armv6 | armv7 | i386 |
|---|---|---|---|---|---|
| FreeBSD:14:latest | 0.1.1_6 | 0.1.1_6 | - | - | 0.1.1_6 |
| FreeBSD:14:quarterly | 0.1.1_6 | 0.1.1_6 | n/a | - | 0.1.1_6 |
| FreeBSD:15:latest | 0.1.1_6 | 0.1.1_6 | n/a | - | - |
| FreeBSD:15:quarterly | 0.1.1_6 | 0.1.1_6 | n/a | n/a | n/a |
| FreeBSD:16:latest | 0.1.1_5 | 0.1.1_6 | n/a | n/a | n/a |
| FreeBSD:16:quarterly | n/a | n/a | n/a | n/a | n/a |
Dependencies
The Makefile names none itself; they come from USES and USE_*.
The full lists below include those, and their dependencies in turn.
Build dependencies 1
No port depends on this one.
Configuration
No options to configure.
- USES
- go:modules
- Service scripts
- none
Files
pkg-plist 1
- bin/bumblebee
distinfo 3
| File | Size | SHA256 |
|---|---|---|
| go/security_bumblebee/perplexityai-bumblebee-v0.1.1_GH0/v0.1.1.mod | 50 | 9a0e32ee8b3e8ca297631170ac2c8589ddaf1718b4752ffeead357da683a9878 |
| go/security_bumblebee/perplexityai-bumblebee-v0.1.1_GH0/v0.1.1.zip | 200337 | bf92e82b2bfc2752dec5c0c9fdfbcf2e08dee0be273b8afc7ef187e6ab50b266 |
| go/security_bumblebee/perplexityai-bumblebee-v0.1.1_GH0/perplexityai-bumblebee-v0.1.1_GH0.tar.gz | 154198 | 559a5fa9ca48128fb113644e7800048b0b6c2ff3a33bc56fe5236582ba1686b0 |
Commit history 6
The latest 5 of 6 in the history this site was built from.