Use Case

Software Supply Chain Security

Securing dependencies, builds, and artifacts.

17 providers 508 APIs 11 declared variants

Knowing and trusting what goes into a build — dependency inventory, SBOMs, license checks, artifact signing, and provenance across the release pipeline.

17 API providers on the APIs.io network offer software supply chain security. The highest-rated are GitHub, Anchore, Amazon License Manager, Amazon CodeArtifact, Livepeer.

Providers

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Exemplar 2 Complete, well-documented, and agent-ready
GitHub The GitHub REST API allows developers to programmatically interact with GitHub resources including reposito... 350 APIs 71.3 Anchore Anchore is a container and software supply chain security company providing open source and enterprise tool... 6 APIs 66.5
Strong 4 Solid coverage with minor gaps
Amazon License Manager AWS License Manager makes it easier to manage licenses in AWS and on-premises servers from software vendors... 1 API 64.9 Amazon CodeArtifact Amazon CodeArtifact is a fully managed, secure artifact repository service that helps organizations store, ... 13 APIs 63.3 Livepeer Livepeer is the open, permissionless protocol for video transcoding, streaming, and AI video inference, coo... 19 APIs 62.6 Livepeer Livepeer is a decentralized video infrastructure network. Independent orchestrators run GPU hardware to pro... 28 APIs 58.3
Developing 4 Usable, with meaningful gaps to close
Ansible Roles A curated collection of APIs and resources for discovering, managing, and consuming Ansible roles — the pri... 10 APIs 52.4 Aqua Security Aqua Security provides cloud-native security for the full application lifecycle, protecting containers, ser... 8 APIs 51.4 Application Research Application Research is a topic collection focused on specifications for declaring application service inte... 36 APIs 45.6 Artifact Hub Artifact Hub is a CNCF incubating web-based application that enables finding, installing, and publishing cl... 10 APIs 44.5
Thin 4 Limited public surface area
Zero Trust Architecture Zero Trust Architecture (ZTA) is a security framework defined by NIST SP 800-207 that requires all users an... 5 APIs 35.2 YARN YARN (Yet Another Resource Negotiator in the original Hadoop context; also the JavaScript package manager) ... 2 APIs 34.2 Chainguard Chainguard builds, secures, and maintains a catalog of hardened, minimal container images and software supp... 6 APIs 34.1 Apache Ant Apache Ant is a Java-based build tool and library developed by the Apache Software Foundation, used to auto... 2 APIs 28.8
Emerging 3 Early or largely undocumented
Certero Certero is an enterprise IT Asset Management (ITAM) software vendor whose flagship CerteroX platform unifie... 6 APIs 27.5 CHAOSS CHAOSS (Community Health Analytics in Open Source Software) is a Linux Foundation project that develops met... 4 APIs 24.4 Apache Maven Apache Maven is a software project management and comprehension tool based on the concept of a project obje... 2 APIs 22.9

What Providers Actually Declared

This use case is a canonical term. These are the free-text strings providers wrote in their own apis.yml that map onto it.

Dependency ManagementDependency Management with IvyGenerate SBOMs for software supply chain transparencyLicense ComplianceOpen Source Risk and Security AssessmentPackage PublishingSBOM GenerationSoftware License ComplianceSoftware Supply Chain SecuritySupply Chain SecurityWeb3 / NFT video drops with on-chain provenance

Scroll for all 11