OSV-Scanner
OSV-Scanner is a free tool that checks the software libraries a project depends on against a public list of known security problems. It is meant for programmers and security staff who want to find risky packages before they ship.
How hard it is to start using it. Easy: install it like a normal app, or use it in your browser. Advanced: you run it on your own server, use the command line, or it is a tool for developers.
Features
Screenshots
Listed in
Covers dependency vulnerabilities and licenses; leaked-secret checks not described.
How to help
AI contributionsNot stated
The project has not said how it feels about AI-written contributions. Maintainers can set this by claiming the listing.