Perplexity Bumblebee: SBOMs scan repositories. EDR products watch running processes. Neither looks at the raw, on-disk state of a developer’s local environment, with lockfiles, extension manifests, and AI tool configs scattered across a home directory.

Read more here.