Proof Of Commitment

Proof Of Commitment is an open-source Model Context Protocol (MCP) server and tool designed to assess the behavioral security risks of software supply chain dependencies. It analyzes npm packages, PyPI packages, Rust crates, Go modules, and GitHub repositories to surface 'commitment' scores based on publisher concentration and behavioral signals—insights often missed by traditional metrics like stars or download counts. It is aimed at developers, DevSecOps, and anyone concerned with software supply chain risk, offering automated risk detection, monitoring, and CI/CD integration.