DependencyTrap is an autonomous supply-chain security agent powered by open-weight Gemma 4. It analyzes code for dependency traps, explains vulnerabilities in simple language, cross-checks packages against known compromised indexes (Snowflake CoCo style), and logs every validation result on the Solana Agent Registry for an immutable audit trail.Tracks Used:
Google Gemma 4 Core
Snowflake CoCo Data
Solana Agent Identity
GitHub Copilot Acceleration
How to run the demo:
git clone https://github.com/CyberwarriorAtt/Dependency_Trap.git
cd Dependency_Trap
python run_demo_stdlib.py