Dependency Vulnerability Check

Paste a requirements.txt, package.json or go.mod — get known CVEs per package from OSV.dev with fixed versions to upgrade to.

Who it's for

Developers and security reviewers.

What you send

A manifest/lockfile.

What you get

A markdown report (plus files where relevant). Covers: CVE, OSV, npm audit, pip audit, SCA, dependency security.

Runs deterministically on public data — no account or API key needed from you.

What the buyer provides: A manifest/lockfile.

Search terms: CVE, OSV, npm audit, pip audit, SCA, dependency security