Thirdpass — Coordinated supply chain review<br>svg]:px-2.5 gap-2" data-slot="button">Discordsvg]:px-2.5 gap-2" data-slot="button">GitHub

Thirdpass<br>Coordinated supply chain review.<br>Thirdpass directs review effort toward package artifacts that need coverage, records structured findings, and lets projects check their dependencies from the terminal.<br>$ thirdpass review-any --nightshiftCopy

Recent Reviews<br>View all reviews<br>Showing 5 of 19 reviewed packages

Search<br>[role=checkbox]]:translate-y-[2px] text-xs font-medium text-muted-foreground">Package[role=checkbox]]:translate-y-[2px] text-xs font-medium text-muted-foreground">Registry[role=checkbox]]:translate-y-[2px] text-xs font-medium text-muted-foreground">Version[role=checkbox]]:translate-y-[2px] text-xs font-medium text-muted-foreground">Severity[role=checkbox]]:translate-y-[2px] text-xs font-medium text-muted-foreground">Coverage[role=checkbox]]:translate-y-[2px] text-xs font-medium text-muted-foreground text-right">Reviews[role=checkbox]]:translate-y-[2px]">9y6_7udsf[role=checkbox]]:translate-y-[2px]">npmjs.com[role=checkbox]]:translate-y-[2px]">1.0.0[role=checkbox]]:translate-y-[2px]">medium[role=checkbox]]:translate-y-[2px]">100%33/33 lines

[role=checkbox]]:translate-y-[2px] text-right">1[role=checkbox]]:translate-y-[2px]">mipsou.freebox[role=checkbox]]:translate-y-[2px]">galaxy.ansible.com[role=checkbox]]:translate-y-[2px]">0.1.1[role=checkbox]]:translate-y-[2px]">none[role=checkbox]]:translate-y-[2px]">23%908/4K lines

[role=checkbox]]:translate-y-[2px] text-right">1[role=checkbox]]:translate-y-[2px]">rand_core[role=checkbox]]:translate-y-[2px]">crates.io[role=checkbox]]:translate-y-[2px]">0.10.1[role=checkbox]]:translate-y-[2px]">none[role=checkbox]]:translate-y-[2px]">24%357/1.5K lines

[role=checkbox]]:translate-y-[2px] text-right">1[role=checkbox]]:translate-y-[2px]">django-historicalrecords-unleashed[role=checkbox]]:translate-y-[2px]">pypi.org[role=checkbox]]:translate-y-[2px]">1.3.1[role=checkbox]]:translate-y-[2px]">none[role=checkbox]]:translate-y-[2px]">53%387/725 lines

[role=checkbox]]:translate-y-[2px] text-right">1[role=checkbox]]:translate-y-[2px]">pr-spec-response[role=checkbox]]:translate-y-[2px]">npmjs.com[role=checkbox]]:translate-y-[2px]">0.0.0[role=checkbox]]:translate-y-[2px]">none[role=checkbox]]:translate-y-[2px]">73%66/90 lines

[role=checkbox]]:translate-y-[2px] text-right">1[role=checkbox]]:translate-y-[2px] p-0" colSpan="6">14 more reviewed packages

How Thirdpass Builds Review Coverage

Assign review targets

The server directs review effort toward packages and files that need coverage.

Layered evidence

Reviews can cover part of a package, adding evidence without certifying the whole thing.

Check dependency coverage

Projects query accumulated review data with thirdpass check.

Quickstart<br>Contribute reviews and check dependency coverage from your terminal.<br>Help review the shared package pool:

Copy<br>$ thirdpass review-any --nightshift

Review specific files:

Copy<br>$ thirdpass review d3 4.10.0 \<br>--file index.js \<br>--file build/d3.js

Check accumulated reviews for your dependencies:

Copy<br>$ thirdpass check

Designed for multiple ecosystems<br>Thirdpass supports dependency ecosystems through extensions.<br>[role=checkbox]]:translate-y-[2px] text-xs font-medium text-muted-foreground">Ecosystem[role=checkbox]]:translate-y-[2px] text-xs font-medium text-muted-foreground">Registry[role=checkbox]]:translate-y-[2px] text-xs font-medium text-muted-foreground">Extension[role=checkbox]]:translate-y-[2px] text-xs font-medium text-muted-foreground">Availability[role=checkbox]]:translate-y-[2px] text-sm font-medium text-foreground">Rust[role=checkbox]]:translate-y-[2px] font-mono text-xs text-muted-foreground">crates.io[role=checkbox]]:translate-y-[2px] font-mono text-xs text-muted-foreground">thirdpass-rs[role=checkbox]]:translate-y-[2px]">svg]:size-3 gap-1 [&>svg]:pointer-events-none focus-visible:border-ring focus-visible:ring-ring/50 focus-visible:ring-[3px] aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive transition-[color,box-shadow] overflow-hidden border-transparent bg-primary text-primary-foreground [a&]:hover:bg-primary/90">Built in[role=checkbox]]:translate-y-[2px] text-sm font-medium text-foreground">Python[role=checkbox]]:translate-y-[2px] font-mono text-xs text-muted-foreground">pypi.org[role=checkbox]]:translate-y-[2px] font-mono text-xs text-muted-foreground">thirdpass-py[role=checkbox]]:translate-y-[2px]">svg]:size-3 gap-1 [&>svg]:pointer-events-none focus-visible:border-ring focus-visible:ring-ring/50 focus-visible:ring-[3px] aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive transition-[color,box-shadow] overflow-hidden border-transparent bg-primary text-primary-foreground [a&]:hover:bg-primary/90">Built in[role=checkbox]]:translate-y-[2px] text-sm font-medium text-foreground">JavaScript[role=checkbox]]:translate-y-[2px]...