Security●Mid
Pqurp – Quarantine Window for Packages to Prevent Supply Chain Attacks
Speculative protocol for package quarantine without a reference implementation or registry buy-in.
Bold Bet
exec7
502mo ago
Back to browse
Map of 90 companies in the co-packaged optics supply chain
by lboquillon·May 18, 2026·1 point·0 comments
AI Analysis
●●SolidNiche GemRabbit Hole
Maps hidden monopolies like Soitec wafers and Ajinomoto dielectric films.
Strengths
- •Traces upstream suppliers most maps miss — from indium phosphide to MOCVD reactors.
- •Builds on author's existing Investmap graph with 450+ semiconductor companies.
- •Explains why copper traces are hitting physical limits in AI server racks.
Weaknesses
- •Static Substack post — not a live, filterable database or API.
- •No export options or data downloads for further analysis.
Category
Target Audience
Semiconductor investors and hardware supply chain analysts
Similar To
Investmap · Supply Chain Dive · Semiconductor Industry Association reports
Similar Projects
Security●●Solid
TraceTree – Sandboxed behavioral analysis for NPM and PyPI packages
Sandboxed runtime analysis catches malicious install scripts static scanners like npm audit miss.
Solve My ProblemDark Horse
Tejas_dmg
1027d ago
Security●Mid
Lateos/NPM-scan – open-source NPM supply chain scanner, v0.18.3
NPM supply chain scanner competing against Socket, Snyk, and npm audit.
Ship It
lateos-ai
101mo ago
Security●Mid
Package Proxy
Yet another package proxy when Sonatype, Verdaccio, and Cloudsmith already own this space.
Ship It
mslaviero
201mo ago
Security●Mid
I built an AI-agent skill to audit supply-chain attack exposure
Dependabot already does this without the AI agent overhead.
Ship It
WasimBhai
102mo ago
Security●Mid
A VS Code extension buffers NPM updates to avoid supply chain attacks
Delays npm updates by days to avoid malicious releases, but Dependabot already does this.
Solve My Problem
about14sheep
101d ago