/**
 * Supply Chain MCP Scanner
 *
 * Scans MCP server dependencies for security vulnerabilities,
 * license compliance, and supply chain integrity issues.
 *
 * Key features:
 * - CVE/vulnerability scanning via npm audit
 * - Sigstore signature verification
 * - SLSA provenance checking
 * - License compliance analysis
 * - Typosquatting detection
 *
 * @module scanners/agent/supply-chain-mcp
 */
import type { AgentScannerResult, MCPManifest } from "./types.js";
/**
 * Run supply chain MCP scanner
 */
export declare function runSupplyChainMCP(manifest: MCPManifest, options?: {
    /** Path to MCP server package */
    packagePath?: string;
    /** Skip npm audit */
    skipVulnScan?: boolean;
    /** Skip license check */
    skipLicenseCheck?: boolean;
    /** Skip typosquatting check */
    skipTyposquatCheck?: boolean;
    /** Skip Sigstore verification */
    skipSigstoreCheck?: boolean;
    /** Packages to check for Sigstore attestation */
    checkSigstorePackages?: string[];
}): Promise<AgentScannerResult>;
/**
 * Check if supply chain scanner is available
 */
export declare function checkSupplyChainMCPAvailable(): Promise<{
    scanner: "supply-chain-mcp";
    available: boolean;
    version: string;
    npmAvailable: boolean;
}>;
/**
 * Get supply chain summary from result
 */
export declare function getSupplyChainSummary(result: AgentScannerResult): {
    totalVulns: number;
    criticalVulns: number;
    highVulns: number;
    licenseIssues: number;
    typosquatWarnings: number;
} | null;
//# sourceMappingURL=supply-chain-mcp.d.ts.map