We re building an MVP called Sentraze it s a lightweight tool that helps developers and security teams catch hidden risks in third-party code before they hit production.

It s meant for the kind of stuff CVE scanners often miss:

• Beta or unstable packages

• Telemetry libraries quietly leaking data

• Abandoned dependencies are still being pulled into builds

We re trying to solve a real pain, but we re hitting a wall when it comes to getting early feedback from the right people.
We ve built a waitlist, we ve posted in some communities but it still feels like we re shouting into the void.