Skip to content

ORIGINS.md

Latest commit

 

History

History
16 lines (11 loc) · 1.3 KB

ORIGINS.md

File metadata and controls

16 lines (11 loc) · 1.3 KB
Raw

Origins and adjacent work

BehaviorLock was designed independently as a narrow dependency version diff for npm install lifecycle behavior.

Adjacent open source work shaped the boundary:

  1. Packj performs static and dynamic package analysis, including install time tracing.
  2. Goodman studies runtime dependency behavior drift with eBPF.
  3. GuardDog scans package source and metadata for suspicious patterns.
  4. Socket CLI provides supply chain analysis and install gating.
  5. bob and bobctl define vendor supplied behavior profiles for OCI and Kubernetes workloads.
  6. Behaviorlock by Christian Bucher compares recorded AI agent behavior across model and prompt changes.

BehaviorLock's intended contribution is narrower: environment-qualified profiles for two exact npm versions, a transparent set diff, content-derived behavior identifiers, verifiable references into separately retained raw evidence, and a CI threshold that never claims to classify malware.

No source code from these projects was copied into this repository.