Open-Source Supply Chain CVE Scanner
Paste your package.json, package-lock.json or pinned requirements.txt below. We will instantly scan your dependencies against the OSV.dev vulnerability database.
Privacy Disclosure: Your package names and versions are sent directly to the OSV.dev API (https://api.osv.dev/v1/querybatch) from your browser.
Scan Results
Querying OSV.dev API...
Results will appear here after scanning.