Footer

Your go-to destination for discovering trending open-source projects and uncovering the insights that matter

Legal

  • Terms and conditions
  • Privacy policy

More

  • Pricing
  • Advertise
  • onedump
  • gosnakego
  • Contact us

Social

  • X (Twitter)
  • GitHub
Trendshift owl
What they build speaks louder than words
© 2026 Trendshift, created by Julian Li with ❤️
SignalAdvertise
Trendshift
SignalAdvertise
Sign in
Trendshift owl

Discover trends that matter

SignalAdvertise
DailyWeeklyMonthlyYearly
Live mentionsTopics
RepositoriesDevelopers
InsightsStats
Bifrost
Bifrost

perplexityai/bumblebee

Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.

Visit GitHub
Go
5.1k
499
4 contributors
Apache License 2.0
AchievementsView all →
FeaturedAdvertise to 180K+ monthly visitors
Bifrost

Fastest Enterprise AI Gateway for Routing, Governing, and Securing all your AI Traffic

Momentum

How fast perplexityai/bumblebee is gaining stars, and where it lands on Trendshift and GitHub Trending

Activity and trending

Stars, forks and merged pull requests each day or month, lined up with the repository's rank on Trendshift Trending

Sep 5 – Nov 4, 2026

Stars +159 in 61 days

0102030
25

Forks +24 in 61 days

012
2

Merged PRs 3 in 61 days

01
1

Trendshift Trendingwhere the repository ranked each day it made the top 25

Not in the Trendshift top 25 in this period

Sep 5Sep 13Sep 21Sep 29Oct 7Oct 15Oct 23Oct 31
The left and right arrow keys step from day to day; Home and End go to the first and the last

Stars, forks, merged pull requests and Trendshift Trending rank, by day
DayStars gainedForks gainedMerged PRs
Sat, Sep 5, 2026+3+10
Sun, Sep 6, 2026+0+00
Mon, Sep 7, 2026+2+00
Tue, Sep 8, 2026+2+00
Wed, Sep 9, 2026+1+10
Thu, Sep 10, 2026+3+10
Fri, Sep 11, 2026+1+10
Sat, Sep 12, 2026+6+00
Sun, Sep 13, 2026+6+00
Mon, Sep 14, 2026+4+10
Tue, Sep 15, 2026+1+10
Wed, Sep 16, 2026+3+10
Thu, Sep 17, 2026+7+00
Fri, Sep 18, 2026+3+00
Sat, Sep 19, 2026+4+10
Sun, Sep 20, 2026+2+00
Mon, Sep 21, 2026+2+00
Tue, Sep 22, 2026+1+10
Wed, Sep 23, 2026+3+01
Thu, Sep 24, 2026+1+00
Fri, Sep 25, 2026+5+00
Sat, Sep 26, 2026+1+10
Sun, Sep 27, 2026+0+10
Mon, Sep 28, 2026+0+00
Tue, Sep 29, 2026+2+00
Wed, Sep 30, 2026+2+10
Thu, Oct 1, 2026+2+00
Fri, Oct 2, 2026+0+01
Sat, Oct 3, 2026+4+10
Sun, Oct 4, 2026+0+10
Mon, Oct 5, 2026+0+00
Tue, Oct 6, 2026+1+00
Wed, Oct 7, 2026+0+00
Thu, Oct 8, 2026+2+11
Fri, Oct 9, 2026+3+00
Sat, Oct 10, 2026+2+00
Sun, Oct 11, 2026+0+00
Mon, Oct 12, 2026+1+10
Tue, Oct 13, 2026+3+00
Wed, Oct 14, 2026+8+20
Thu, Oct 15, 2026+3+00
Fri, Oct 16, 2026+5+10
Sat, Oct 17, 2026+2+00
Sun, Oct 18, 2026+2+00
Mon, Oct 19, 2026+3+00
Tue, Oct 20, 2026+0+20
Wed, Oct 21, 2026+0+10
Thu, Oct 22, 2026+3+00
Fri, Oct 23, 2026+2+00
Sat, Oct 24, 2026+4+00
Sun, Oct 25, 2026+2+00
Mon, Oct 26, 2026+7+10
Tue, Oct 27, 2026+1+00
Wed, Oct 28, 2026+25+00
Thu, Oct 29, 2026+0+00
Fri, Oct 30, 2026+1+00
Sat, Oct 31, 2026+2+00
Sun, Nov 1, 2026+4+00
Mon, Nov 2, 2026+1+00
Tue, Nov 3, 2026+0+10
Wed, Nov 4, 2026+1+00
Total+159+243
  • 1#1 on the list
  • 7Rank that day
  • Not trending

    • Mentions and achievements

    Where people are talking about perplexityai/bumblebee, and every badge it has earned
    1. Oct 171 post

      • 做 AI 应用，模型选好之后，还会遇到几个实际问题： 怎么查自己的资料？怎么记住以前的对话？用什么界面操作？出了问题怎么检查？ 这 10 个 GitHub 项目，按用途整理好了： 一、知识库与长期记忆 1. LlamaIndex 连接自己的数据，搭建文档检索和问答应用。 2. RAGFlow 把文档整理成知识库，让 AI 找到相关资料后再回答。 3. Mem0 给 AI…

        Read full on X, posted by @bdall_1

        @bdall_1 · x.com

    2. Oct 121 post

      • 50个超实用的GitHub仓库 1. iFixAi — AI对齐测试 → 2. public-apis — 免费API合集 → 3. build-your-own-x — 边做边学 → 4. developer-roadmap — 学习任何技能 → 5. free-programming-books — 数千本免费书籍 → 6. system-design-primer — 系统设计入门 →…

        Read full on X, posted by @wanerfu

        @wanerfu · x.com

    3. 2 months earlier
    4. Aug 191 post

      • • Single static binary with zero non-stdlib dependencies • Three scan profiles: baseline, project, and deep • Parses lockfiles, package-manager metadata, extension manifests, and MCP configs

        Read full on X, posted by @the_osps

        @the_osps · x.com

    5. 10 days earlier
    6. Aug 91 post

      • Top Trending Open Source Projects This Week

        Read full on Reddit

        r/myopensource

    7. Aug 61 post

      • 🚨 Perplexity AI just built a tool that scans every piece of software on your machine for supply chain attacks. Run it right now. You will probably find something. It's called bumblebee. And the…

        Read full on X, posted by @RituWithAI

        @RituWithAI · x.com

    8. Jul 311 post

      • GitHub is a cemetery of abandoned side projects. But tucked away are a few 'cheat-code' repos that actually feel like superpowers.

        Read full on X, posted by @Redd_Devv

        @Redd_Devv · x.com

    9. 9 days earlier
    10. Jul 221 post

      • Perplexity's Bumblebee builds a read-only inventory of every package, editor extension, and MCP server on your dev machine, then flags the ones named in known supply-chain compromises

        Read full on Reddit

        r/WebAfterAI

    11. 16 days earlier
    12. Jul 61 post

      • Bumblebee: A zero-dependency Go scanner for malicious MCP servers and extensions

        Read full on Hacker News

        Hacker News

    13. 9 days earlier
    14. Jun 271 post

      • Perplexity quietly open-sourced a scanner that tells you which of your dev machines are exposed to a poisoned npm or PyPI package right now. Most people have not seen this one. It reads on-disk…

        Read full on X, posted by @NiteshTechAI

        @NiteshTechAI · x.com

    15. Jun 231 post

      • 5 must-have repos for developers in 2026. Links in reply.

        Read full on X, posted by @rishideoghare

        @rishideoghare · x.com

    You might also like

    Repositories close to perplexityai/bumblebee
    FeaturedAdvertise to 180K+ monthly visitors
    Bifrost

    Fastest Enterprise AI Gateway for Routing, Governing, and Securing all your AI Traffic

    zonko-ai/supply-chain-attack

    JavaScript

    Tells you if you are impacted by the supply chain attack.

    24

    mkbhardwas12/pwned-deps

    Python

    Is your lockfile pwned? 5-second scan of npm/PyPI/Maven/Cargo/Go/RubyGems lockfiles for compromised packages — OSV + curated campaign feed, --min-age cooling-off gate, exit 4 when a scan is incomplete. SLSA L3, Sigstore-signed feed.

    164174

    Cobenian/shai-hulud-detect

    Shell

    A simple project to detect the Shai-Hulud npm supply chain attack

    41083

    step-security/dev-machine-guard

    Go

    Scan your dev machine for AI agents, MCP servers, IDE extensions, and suspicious packages - in seconds.

    19727

    DataDog/guarddog

    Python

    🐍 🔎 GuardDog is a CLI tool to Identify malicious PyPI and npm packages

    1.2k131

    SocketDev/socket-mcp

    TypeScript

    Model Context Protocol server for socket.dev integration

    13849

    ptn1411/skill

    Python

    Bộ công cụ và tập hợp skill hỗ trợ phân tích phần mềm, khôi phục cấu trúc nguồn ở mức cần thiết, rà soát bảo mật, kiểm tra phụ thuộc và xây dựng kế hoạch khắc phục cho các hệ thống mà bạn sở hữu hoặc được phép đánh giá.

    323166

    safedep/vet

    Go

    Protect against malicious open source packages 🤖

    1.1k119

    SocketDev/socket-cli

    TypeScript

    Command-line interface for socket.dev security analysis

    33677