ossindex

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

Audits an NPM package.json file to identify known vulnerabilities.

Check your Python environments for vulnerable Open Source packages with OSS Index or Sonatype Nexus Lifecycle.

Sonatype OSS Index - Maven Integrations

Sonatype OSS Index - Public

Monitors for new or updated dependencies and provides vulnerability information wihthin the editor

Implement vulnerabilities scanning on top of package management system like apt, pip, composer...

Python library for querying OSS Index

Nancy on Homebrew

Generated API client for Sonatype OSS Index in Go

Audits nodejs dependencies for known vulnerabilities.

🔍 Scan for dependency confusion vulnerabilities in your projects to enhance security and protect against potential threats with ease.