[iscmt]

Not sure if it's being actively maintained, but it covers a lot of low-hanging fruit: https://github.com/Adversis/tailsnitch/blob/main/docs/CHECKS...

Was previously discussed here too: https://news.ycombinator.com/item?id=46501137