Proof Of Commitment

Proof Of Commitment is an open-source MCP server and CLI tool for scoring open-source software packages (npm, PyPI, Rust, Go, GitHub) based on behavioral commitment signals—such as publisher concentration and package risk in critical software supply chains. It helps developers, security teams, and CI pipelines proactively identify supply chain risks by surfacing package-level attack surface concentrations and sending real-time alerts before vulnerabilities appear in traditional audits.