2 talks mention this tool across 2 BSides chapters.
Automated platform that monitors seven open-source software ecosystems (npm, PyPI, Maven Central, crates.io, Ruby gems, NuGet, Go) for malware, engineering risks, vulnerabilities, and legal/author risks