Supply-chain incident triage
Turn a scary package alert into a 30-minute containment brief.
Dependency Firebreak is for agent operators and solo maintainers who need to answer one painful question fast: which repos, secrets, builds, and humans are inside the blast radius?
npm malware alertsMCP/plugin sprawllocal-first agents
01 / Select a drill
Where could it run?
What evidence exists?
02 / Repos in scope