Main Project

Advanced dependency provenance analysis for enterprise CI/CD environments.

Live Interactive Demo

https://scampcat.github.io/main-project

Analyze repositories directly in-browser with:

• recursive dependency graphing
• SBOM generation
• provenance scoring
• GitHub Actions inspection
• artifact anomaly detection

---

Quick Example

npx main-project analyze https://github.com/org/repo

---

Why Main Project?

Most dependency scanners only inspect direct packages.

Main Project expands:

• transitive dependencies
• workflow execution chains
• package provenance
• registry trust relationships
• CI artifact integrity

Designed for DevSecOps teams operating at scale.