perplexityai/bumblebee
★ 5,086 stars
Covered in week 2026-W32 · the 2026-08 report
Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.
What bumblebee is
Bumblebee is a read-only inventory collector for package, extension, and developer-tool metadata on macOS and Linux developer endpoints.
From the repository README · read it on GitHub →
Transcript
When a critical vulnerability hits npm or PyPI, engineering teams waste hours manually checking which developer machines are running the affected package. Bumblebee automates this by scanning macOS and Linux endpoints for installed packages, extensions, and developer tools, then outputs the exact inventory to identify supply-chain exposure. Built by Perplexity AI with nearly 5,000 GitHub stars. Would this catch the next log4j on your team?