元链 yotta-chain

元链 —— 跨智能体的供应链依赖校验技能：零依赖自研引擎本地解析 npm（package.json / package-lock v1-v3 / .npmrc）与 Python（requirements / pyproject.toml / poetry.lock / Pipfile）及 Maven pom.xml，检测依赖混淆（私有包名被公共仓库同名抢占 / 混合仓库 / 可疑仓库 URL / extra-index 回退）、lockfile 与清单不一致、缺失锁文件、未固定版本、typo-squat 仿冒命名，并生成 SBOM-lite（CycloneDX 1.5 子集）。触发：用户要在构

as observed 2026-09-03T07:20:35.503Z

Want to know when this changes? Sign in with an email address and we will tell you. Free, no card, watch up to 5.

Identifier: yotta-chain
Source: ClawHub
Version observed: 0.1.3
Source repository: not published
Repository observation: No source repository listed
First observed here: 2026-08-28T22:06:28.212Z
Observations recorded: 3
Installs (reported upstream): 0
Weekly downloads (upstream): 150

Observation history

2026-09-03T07:20:35.503Z

Fields that differed: changelog latestVersion topics

Field	Before	After
`changelog`	"yotta-chain 0.1.2\n\n- Updated documentation files (README.md, README.zh-CN.md, SKILL.md, package.json) to reflect current version and supported ecosystems.\n- README、SKILL.m	"- Removed skill-card.md file to streamline repository structure.\n- No functional or interface changes introduced in this version."
`latestVersion`	"0.1.2"	"0.1.3"
`topics`	["security"]	["SBOM","供应链安全","依赖审计","依赖校验","依赖混淆"]

2026-08-29T23:02:09.653Z

Fields that differed: changelog latestVersion

Field	Before	After
`changelog`	"- No changes detected in this version.\n- Version number remains at 0.1.1; documentation and usage instructions are unchanged."	"yotta-chain 0.1.2\n\n- Updated documentation files (README.md, README.zh-CN.md, SKILL.md, package.json) to reflect current version and supported ecosystems.\n- README、SKILL.m
`latestVersion`	"0.1.1"	"0.1.2"

Correction

If you maintain this extension and believe anything above is inaccurate, request a correction. Corrections are published, and disputed entries are marked as disputed while under review.