niche · -1.1 market domain

Software Supply Chain

Score 18.6 / 100 21 providers 2 APIs Search apis.io →
Variants seen in the corpus: Software Supply ChainSoftwareSupplyChain

Providers using this tag (21)

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Strong 2 Solid coverage with minor gaps
JFrogArtifactoryCI/CDContainer RegistryDevOps14 APIs56.6Amazon CodeArtifactAmazonArtifact RepositoryPackage ManagementDevOps1 API56.2
Developing 8 Usable, with meaningful gaps to close
AnacondaCompanyData ScienceMachine-LearningArtificial Intelligence5 APIs52.7FossaCompanySecurityOpen-Source1 API48.7HarnessDevOpsGitOpsInternal Developer PortalLifecycle17 APIs47.5CloudsmithArtifact ManagementDevOpsDevSecOpsDistribution1 API45.2Root (fka Slim.ai)CompanySecurityVulnerability ManagementContainer Security1 API44.7PackagistComposerPHPPackage RegistryDependency Management1 API42.2AnchoreContainer SecurityContainersSBOM1 API42.1TideliftCompanyOpen-SourceDependency Management1 API39.5
Thin 7 Limited public surface area
SigstoreCertificate AuthorityCode SigningContainersCryptography2 APIs37.2SonatypeSecurityVulnerability ManagementSBOM1 API36.4RenovateDependencyUpdatesDeveloperToolsBotsAutomation6 APIs36.0Endor LabsSecuritySCAReachability1 API34.8Sonatype NexusArtifact ManagementDevOpsPackage ManagementRepository1 API31.8The Update Framework (TUF)CNCFCloud-NativeGraduatedSecurity7 APIs27.7Nexus Repository ManagerArtifact ManagementDevOpsDockerMaven1 API26.6
Emerging 4 Early or largely undocumented
ChainguardCloud-NativeContainer ImagesContainersDevSecOps6 APIs24.2Crash OverrideCompanyCybersecurityApplication Security16.9EXIGERCompanySupply ChainRisk ManagementThird-Party Risk13.8RapidFortCompanySecurityContainer Security12.7

APIs with this tag (2)

Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →

Developing 1 Usable, with meaningful gaps to close
Harness Supply Chain Security APIAPIs for SBOM generation, artifact integrity verification, and policy enforcement for software supply chain...47.5
Thin 1 Limited public surface area
CosignCosign is the Sigstore tool for signing and verifying container images and other OCI artifacts. It enables ...37.2

Score breakdown

Frequency
37.4
log-scaled weighted occurrences
Breadth
0.6
spread across providers
Quality lift
44.0
mean composite of providers using it
Cohesion
1.8
strength of nearest seed neighbor

Related tags

SBOM 7 co-occurrences Package Management 6 co-occurrences DevSecOps 8 co-occurrences Packages 5 co-occurrences Vulnerability Management 6 co-occurrences DevOps 6 co-occurrences Security 11 co-occurrences Organization 5 co-occurrences

Where this tag comes from

Provider tag20
Api tag2

Work with this as data

Every tag here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for tags

7 MCP tools reach this
  • find_tagsBrowse and filter every tag in the catalog.
  • get_cohortThis tag as a scored cohort — every provider carrying it, with scores.
  • cohort_statsPRO — the distribution across this tag: mean, median, band split, adoption rates.
  • cohort_rankingsPRO — the leaderboard, on composite AND agent-readiness axes.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This tag 
curl "https://apis.io/api/v1/tags/software-supply-chain"
All tags 
curl "https://apis.io/api/v1/tags?limit=25"
As a scored cohort 
curl "https://apis.io/api/v1/cohorts/tag/software-supply-chain"
The distribution (Pro) 
curl "https://apis.io/api/v1/cohorts/tag/software-supply-chain/stats" \
  -H "X-API-Key: $APIS_IO_KEY"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.