ComingUp ComingUp
SourceWatch-Local-first Supplier Risk Management

SourceWatch-Local-first Supplier Risk Management

SourceWatch monitors your dependencies for security, breaks and license risks.

Oct 22, 2026 Developer Tools
api tracking dependency management license compliance security-monitoring

Gallery

SourceWatch-Local-first Supplier Risk Management

About

What is SourceWatch?SourceWatch is a desktop application for developers who are tired of dependency surprises. You connect your repositories and SourceWatch continuously monitors all your external sources. If a package introduces a CVE, changes its license, gets deprecated, or ships a breaking API change, you get an immediate, actionable alert - before it breaks your build or your customers.Built natively for Windows with modern.NET, it works offline, respects your privacy, and integrates with the tools you already use: GitHub, Azure DevOps, NuGet, npm and PowerShell.Who is building it?I'm Thorsten, a.NET developer specializing in C#, F# and PowerShell automation. I build desktop apps for a living and I've felt this pain myself - maintaining multiple codebases and constantly checking changelogs manually. SourceWatch is the tool I wished I had.Why 39,000€?This is not a vague "support my dream" ask. The 39k€ has a clear plan: 15k€ - 3 months full-time development to ship a stable, signed v1.0 with auto-updates 10k€ - Security audit, code signing certificates and secure update infrastructure 8k€ - Professional UI/UX polish, documentation and onboarding 6k€ - Launch, early user support and first year of CVE data feedsBackers get lifetime early-adopter licenses, direct input on the roadmap, and for larger tickets, a private Slack with me for integration support.If you maintain.NET or JS projects and you care about supply chain security, I'd love you to back SourceWatch or become a design partner.

Comments (2)

Kathleen Bartoletti Kathleen Bartoletti 2 days ago

sounds good in theory, but how accurate is the monitoring? any issues with false positives?

Edwina Krajcik Edwina Krajcik 2 days ago

another app to monitor dependencies? sounds like a fun way to spend my day, not. how does it handle false positives?