S

supply-chain

CI/CD catalog components for regulated container builds. Standardizes buildah, cosign signing, verification, and release across public-sector projects. Consumed via GitLab CI component includes.

Business Commons is a modular, AI-assisted specification that helps businesses transform existing infrastructure into shared economic opportunities while supporting independent enterprise. It provides frameworks for local marketplaces, cooperative models, space and equipment sharing, workforce coordination, repair economies, local supply chains, mobile vendors, shared financing, insurance, and transparent product provenance. https://roxanneardary.com/business-commons/

[Reference tool] Analyze SBOM dependency graph complexity to predict BuildDependencyGraphWorker performance. CycloneDX and SPDX 2.3. No compiled artifact.

Shared CI/CD components for the Mandrel Project: commit linting, security scanning, tests, semantic versioning, and artifact publishing for Go services, Go modules, and specification bundles.

ForgeAtlas is an open-source lifecycle-aware engineering intelligence platform that helps designers, builders, and manufacturers create longer-lasting physical products by combining durability analysis, material optimization, local-first sourcing, and real-time market intelligence. It transforms fragmented material and supply chain data into actionable engineering decisions that prioritize repairability, sustainability, and real-world buildability. https://roxanneardary.com/forgeatlas/

The Transparent Food Project is an open-source specification for building transparent food supply-chain systems. It uses modular architecture, open data, and explainable intelligence to detect hidden import pathways, analyze supply-chain networks, and provide evidence-based insight into where food actually comes from. https://roxanneardary.com/the-transparent-food-project/

Rust package manager prototype with resolver, CAS store, sandboxed builds, generations, and trust records

CarryChain is an open-source, AGPL-3.0+ licensed marketplace and logistics network that enables direct, transparent trade between producers and buyers without speculative pricing or intermediaries. It integrates verified carriers, publicly listed transport pricing, escrow-based transactions, and full supply-chain visibility to create a fair, trust-based global commerce system where goods move directly from producer to purchaser under transparent and accountable conditions. https://roxanneardary.com/carrychain/

Dimensional freight data warehouse built from public FAF data. Features a reproducible ETL pipeline, star-schema modeling, data quality validations, and decision-ready analytics SQL. Designed as an end-to-end, production-style data engineering and analytics project.

https://public.tableau.com/app/profile/artur.melnyk/viz/faf_freight_dashboard/FAFFreightAnalyticsDashboard

OpenVet Registry, hosted at https://openvet.org.

Defanged malware stages from the telnyx 4.87.1/4.87.2 PyPI supply chain compromise

Defanged malware stages from the litellm 1.82.8 PyPI supply chain compromise

Demo vulnerability NodeJS Yarn project for GitLab Package Hunter