Introducing Deputy: Better signal and control for software supply chains
Aug 3, 2026

Summary
Introduces Deputy, an open-source CLI-first toolchain for software supply chain security. Details its capabilities for inventorying, scanning, triaging, and controlling dependencies across various targets. Highlights the use of CEL for customizable policy enforcement, including exploit signal gating, vulnerability SLA enforcement, and protection against lookalike packages. Explains how Deputy can be used in local development, CI, and download-time proxy scenarios, and mentions its integration with AI coding agents via an MCP server.