๐ก๏ธ GitHub Org Security & Dependency Auditor
Pricing
from $3.00 / 1,000 verified sec filing & transaction alerts
Audits public GitHub organizations for unpatched CVE vulnerabilities (via Google OSV), outdated software dependencies, copyleft license risks (GPL/AGPL), and sensitive configuration file templates.
The GitHub organization name or handle to audit (e.g., 'expressjs', 'pallets', 'airbnb', 'facebook', 'hashicorp').
Maximum number of public repositories to discover and scan for manifest files. Higher limits will inspect deeper repository portfolios.
Select which package ecosystems to scan. The auditor parses package.json (npm), requirements.txt/pyproject.toml (PyPI), go.mod (Go), Cargo.toml (Rust), and pom.xml (Maven).
[ "npm", "pypi", "golang", "cargo"]Filter findings by minimum vulnerability threat severity level.
Flags packages utilizing restrictive copyleft licenses (e.g. GPL-2.0, GPL-3.0, AGPL-3.0, SSPL) that may pose intellectual property or commercial contamination risks.
If TRUE, includes the top-level Organization Security Scorecard as record #1 in the dataset. If FALSE (Recommended), the dataset contains 100% pure, clean findings rows for pristine CSV/Excel exports, while the scorecard is accessible in the Key-Value Store (OUTPUT / SUMMARY).
Optional: Supply a GitHub Personal Access Token (classic or fine-grained) to increase API rate limits from 60 req/hr to 5,000 req/hr. Leave blank to run in tokenless public mode.
Optional Discord or Slack webhook URL to receive instant notification alerts when CRITICAL or HIGH severity CVEs are discovered.