Pricing

from $0.60 / 1,000 results

Try for free

Go to Apify Store

OSV Lockfile Advisory Lookup

Try for free

Query the public OSV.dev API for known vulnerabilities on package pins (npm/PyPI and more). Paste packages or a lockfile excerpt and get vuln IDs with summaries. Unofficial.

Pricing

from $0.60 / 1,000 results

Rating

0.0

(0)

Developer

Bakos Bence

Actor stats

Bookmarked

Total users

Monthly active users

4 hours ago

Last modified

Categories

Developer tools

Automation

Other

You can access the OSV Lockfile Advisory Lookup programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1from apify_client import ApifyClient
2
3# Initialize the ApifyClient with your Apify API token
4# Replace '<YOUR_API_TOKEN>' with your token.
5client = ApifyClient("<YOUR_API_TOKEN>")
6
7# Prepare the Actor input
8run_input = {
9    "packages": [{
10            "ecosystem": "npm",
11            "name": "lodash",
12            "version": "4.17.20",
13        }],
14    "lockfileText": "",
15    "lockfileType": "auto",
16    "maxItems": 5,
17}
18
19# Run the Actor and wait for it to finish
20run = client.actor("bakos_bence/osv-lockfile-advisories").call(run_input=run_input)
21
22# Fetch and print Actor results from the run's dataset (if there are any)
23print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")
24for item in client.dataset(run.default_dataset_id).iterate_items():
25    print(item)
26
27# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

OSV lockfile advisories — npm/PyPI vulns API in Python

The Apify API client for Python is the official library that allows you to use OSV Lockfile Advisory Lookup API in Python, providing convenience functions and automatic retries on errors.

Install the apify-client

$pip install apify-client

Other API clients include:

OSV Lockfile Advisory Lookup API in JavaScript

OSV Lockfile Advisory Lookup API through CLI

OSV Lockfile Advisory Lookup OpenAPI definition

OSV Lockfile Advisory Lookup API

GitHub Security Advisories Scraper - GHSA CVE Data

ninhothedev/github-advisories-scraper

$1/1K 🔥 Scrape the GitHub Advisory Database (GHSA): vulnerabilities with affected packages, ecosystem-specific vulnerable version ranges, first patched version, CVSS, EPSS and CWE. One row per affected package. No API key required.

ninhothedev

OSV Scraper – Open Source Vulnerabilities for npm, PyPI & Go

ninhothedev/osv-scraper

$0.5/1K 🔥 Fast OSV vulnerability scraper! Package vulns across npm, PyPI, Go, Maven, crates, RubyGems & more — severity, aliases & fixed versions. JSON, CSV, Excel or API in seconds. Scan dependencies & pull thousands of advisories ⚡

ninhothedev

Dependency Advisory Monitor — OSV & GitHub Security

nexgendata/dependency-advisory-monitor

Scan npm, PyPI, Maven, Go & more dependencies for known vulnerabilities via OSV.dev and the GitHub Advisory Database. CI/CD-ready, no login.

NexGenData

OSV Package Vulnerability Scanner

technicaldost/osv-package-vulnerability-scanner

Find vulnerabilities for npm, PyPI, Maven, Go, NuGet, RubyGems, and crates.io packages.

Technical Dost Solutions

GitHub Security Advisory Export

titan_coder/github-security-advisory-export

Durable monitor for GitHub Security Advisories (GHSA/CVE) on your package watch-list — npm, PyPI, Maven, RubyGems, Go, NuGet, Composer and more. Diffs each check against what you've already seen and charges only for genuinely new or updated advisories; a clean check costs nothing extra.

Radu Furtuna

PyPI Package Release Monitor

technicaldost/pypi-package-release-monitor

Re-check PyPI packages you already depend on for a new version. Official JSON API. No download of wheels.

Technical Dost Solutions

Software Security Intelligence - CVE, KEV & GitHub Advisories

darknezz/software-security-intelligence

One row per vulnerability, joined across the NVD CVE 2.0 API, the CISA Known Exploited Vulnerabilities catalogue and GitHub Security Advisories: CVSS, CWE, affected products and version ranges, package fix versions, and whether the flaw is exploited in the wild. No API key.

Oaida Adrian

npm Package Health Auditor

contributive_naiad_wgt/npm-package-health-auditor

Audit npm package maintenance, popularity, licensing, typings, deprecation, and metadata without an API key.

Through My Own

FTC Warning Letters

bakos_bence/ftc-warning-letters

Companies that received Federal Trade Commission warning letters: recipient organization, letter title, date when available, and letter URL. Entity recipients preferred; person-only letters filtered. Unofficial; not affiliated with the FTC.