Bumblebee

An open-source, read-only scanner for macOS and Linux developer machines that inventories risky packages, extensions, and AI tool configuration, including MCP server configurations, for supply-chain exposure auditing.