Static multi-ecosystem dependency evidence, security, SBOM, and update-impact analysis for coding agents.