Scan your project dependencies for known vulnerabilities using the OSV database
Paste your package.json, requirements.txt, go.mod, Cargo.toml, or Gemfile content
Queries the OSV.dev vulnerability database. No data stored.
Vulnerabilities are queried from OSV.dev — Google's open-source vulnerability database aggregating data from GitHub Advisory Database, PyPI, RustSec, Go Vulnerability Database, and more.