- bumblebee Read-only supply-chain exposure scanner for developer endpoints
- 0.1.1_5 security on this many watch lists=0 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 0.1.1_4Version of this port present on the latest quarterly branch.
- Maintainer: kiwi@FreeBSD.org search for ports maintained by this maintainer
- Port Added: 2026年05月25日 04:03:05
- Last Update: 2026年09月03日 04:50:55
- Commit Hash: dd09051
- License: APACHE20
- WWW:
- https://github.com/perplexityai/bumblebee
- Description:
- Bumblebee is a read-only inventory collector for package, extension, and
developer-tool metadata on developer endpoints, built to check exposure to
known software supply-chain compromises.
It answers a narrow supply-chain response question: when an advisory names a
package, extension, or version, which developer machines show a match in their
on-disk metadata right now?
SBOMs help answer what shipped, and EDR helps answer what ran or touched the
network, but supply-chain response often needs a different view: messy local
state across lockfiles, package-manager metadata, extension manifests, and
developer-tool configurations.
Bumblebee turns that scattered on-disk state into structured NDJSON component
records and, when given an exposure catalog, flags exact matches for fast,
read-only exposure checks.
Key properties:
- Single static binary, zero non-stdlib dependencies
- Three scan profiles (baseline, project, deep) for different populations
- Reads lockfiles, package-manager install metadata, extension manifests, and
MCP JSON configs — without executing any package manager
- Emits NDJSON output suitable for log-ingest pipelines
- Homepage cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port
- Manual pages:
- FreshPorts has no man page information for this port.
- pkg-plist: as obtained via:
make generate-plist -
- USE_RC_SUBR (Service Scripts)
- no SUBR information found for this port
- Dependency lines:
-
- bumblebee>0:security/bumblebee
- To install the port:
- cd /usr/ports/security/bumblebee/ && make install clean
- To add the package, run one of these commands:
- pkg install security/bumblebee
- pkg install bumblebee
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.- PKGNAME: bumblebee
- Flavors: there is no flavor information for this port.
- distinfo:
- TIMESTAMP = 1779677916
SHA256 (go/security_bumblebee/perplexityai-bumblebee-v0.1.1_GH0/v0.1.1.mod) = 9a0e32ee8b3e8ca297631170ac2c8589ddaf1718b4752ffeead357da683a9878
SIZE (go/security_bumblebee/perplexityai-bumblebee-v0.1.1_GH0/v0.1.1.mod) = 50
Packages (timestamps in pop-ups are UTC):bumblebee| ABI | aarch64 | amd64 | armv6 | armv7 | i386 | powerpc | powerpc64 | powerpc64le |
|---|
| FreeBSD:13:latest | - | - | - | - | - | n/a | n/a | n/a | | FreeBSD:13:quarterly | - | - | - | - | - | n/a | n/a | n/a | | FreeBSD:14:latest | 0.1.1_4 | 0.1.1_4 | - | - | 0.1.1_4 | - | - | - | | FreeBSD:14:quarterly | 0.1.1_4 | 0.1.1_4 | - | - | 0.1.1_4 | - | - | - | | FreeBSD:15:latest | 0.1.1_4 | 0.1.1_4 | n/a | - | n/a | n/a | - | - | | FreeBSD:15:quarterly | 0.1.1_4 | 0.1.1_4 | n/a | - | n/a | n/a | - | - | | FreeBSD:16:latest | 0.1.1_4 | 0.1.1_4 | n/a | - | n/a | n/a | - | - |
- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Build dependencies:
-
- go126 : lang/go126
- Fetch dependencies:
-
- go126 : lang/go126
- There are no ports dependent upon this port
Configuration Options:- No options to configure
- Options name:
- security_bumblebee
- USES:
- go:modules zip
- FreshPorts was unable to extract/find any pkg message
- Master Sites:
-
|
