diff --git a/supply-chain/config.toml b/supply-chain/config.toml
index 99b12774..fde2a665 100644
--- a/supply-chain/config.toml
+++ b/supply-chain/config.toml
@@ -7,6 +7,9 @@ version = "0.10"
 [imports.bytecode-alliance]
 url = "https://raw.githubusercontent.com/bytecodealliance/wasmtime/main/supply-chain/audits.toml"
 
+[imports.esplugin]
+url = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml"
+
 [imports.google]
 url = "https://raw.githubusercontent.com/google/supply-chain/main/audits.toml"
 
diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock
index 9dd2eab0..d285fa1e 100644
--- a/supply-chain/imports.lock
+++ b/supply-chain/imports.lock
@@ -205,6 +205,8 @@ This crate contains no `unsafe` code and no unnecessary use of the standard
 library.
 """
 
+[audits.esplugin.audits]
+
 [[audits.google.audits.autocfg]]
 who = "Manish Goregaokar <manishearth@google.com>"
 criteria = "safe-to-deploy"