https://openaca.dev/blog/ Notes on Agent Composition Analysis — identity resolution, Agent BOMs, and securing AI agent stacks. en-us https://openaca.dev/blog/introducing-openaca https://openaca.dev/blog/introducing-openaca Tue, 16 Jun 2026 00:00:00 GMT Your dependency scanner can't see your agent stack. OpenACA is an open-source scanner that inventories the MCP servers, plugins, skills, and dependencies your AI agents pull in — and matches them against known security advisories.