Trace-AI

Trace-AI (by Zerberus) analyzes open-source dependency metadata, package registries, and maintainer activity to flag potential supply-chain risks without needing source code. It auto-generates SBOMs (CycloneDX, SPDX, JSON, XML), applies multi-factor risk scoring, and tracks unmaintained packages and license issues. It is built for developers and security teams with CI/CD integration and is based on the open ZSBOM framework.