Pricing

from $17.00 / 1,000 package scanneds

Try for free

Go to Apify Store

Package Dependency Risk Scanner: npm & PyPI Vulnerabilities

Try for free

Give it npm or PyPI package names. For each it reads the registry metadata and latest version (and npm download counts) and queries OSV.dev for known security advisories, then composes a risk brief: known vulnerabilities, deprecation, staleness and a signal. Keyless, agent-callable.

Pricing

from $17.00 / 1,000 package scanneds

Rating

0.0

(0)

Developer

Centor Prat

Actor stats

Bookmarked

Total users

Monthly active users

3 days ago

Last modified

Categories

Developer tools

Security

You can access the Package Dependency Risk Scanner: npm & PyPI Vulnerabilities programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1from apify_client import ApifyClient
2
3# Initialize the ApifyClient with your Apify API token
4# Replace '<YOUR_API_TOKEN>' with your token.
5client = ApifyClient("<YOUR_API_TOKEN>")
6
7# Prepare the Actor input
8run_input = { "packages": [
9        "lodash",
10        "pypi:requests",
11    ] }
12
13# Run the Actor and wait for it to finish
14run = client.actor("centorprat/package-dependency-risk-scanner").call(run_input=run_input)
15
16# Fetch and print Actor results from the run's dataset (if there are any)
17print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")
18for item in client.dataset(run.default_dataset_id).iterate_items():
19    print(item)
20
21# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

Package Dependency Risk Scanner - npm & PyPI API in Python

The Apify API client for Python is the official library that allows you to use Package Dependency Risk Scanner: npm & PyPI Vulnerabilities API in Python, providing convenience functions and automatic retries on errors.

Install the apify-client

$pip install apify-client

Other API clients include:

Package Dependency Risk Scanner: npm & PyPI Vulnerabilities API in JavaScript

Package Dependency Risk Scanner: npm & PyPI Vulnerabilities API through CLI

Package Dependency Risk Scanner: npm & PyPI Vulnerabilities OpenAPI definition

Package Dependency Risk Scanner: npm & PyPI Vulnerabilities API

📦 npm Package Scraper - Downloads & Dependencies

benthepythondev/npm-package-scraper

Extract npm package data with download stats, dependencies, maintainers, and quality scores. Search by keyword, author, or get popular packages. Perfect for JavaScript ecosystem research, competitor tracking, and dependency analysis. Fast API-based extraction, pay-per-result.

Ben

Dependency Release Risk Monitor

q_services/dependency-release-risk-monitor

Monitor npm and PyPI packages for new releases, outdated versions, deprecation, licenses and OSV vulnerabilities.

Q Services

npm & PyPI Package Intelligence

bgfc97/package-intelligence

Metadata + monthly downloads for any npm or PyPI package: version, license, dependency count, repo, downloads. Official public APIs.

Bruno

NPM Package Risk Auditor

ezzatox/npm-package-risk-auditor

Audit public npm packages for maintenance, deprecation, download, license, dependency, and supply-chain risk signals.

Ezzat Ghazi

PyPI npm Dependency Risk Report — Upgrade Alerts

taroyamada/package-portfolio-upgrade-risk-report

Assess package portfolio upgrade risk. Open Input → leave defaults → Start (1 npm package + emitRawRows ≈ USD 0.01/row): https://console.apify.com/actors/EaDYhgcJZLbPJTxm1/input From USD 0.

naoki anzai

npm, PyPI & crates.io Package Intelligence

optirefine/package-intelligence

Bulk package health, vulnerabilities and dependency data for npm, PyPI and crates.io. One row per package: version, licence, maintainers, downloads, OSV advisories, deps.dev dependency counts, and a 0-100 health score.

OptiRefine

npm Package & Dependency Vulnerability Checker (MCP)

woolen_snake/package-health-checker

Check npm package health and vulnerabilities via OSV.dev and GitHub Advisories, including transitive dependencies from package-lock.json.

coco zizi

Package Vulnerability Scanner (OSV SCA, CVSS + Fixes)

scrapers_lat/package-vulnerability-scanner

Scan open-source packages for known vulnerabilities from OSV.dev (GHSA, CVE, PYSEC, RUSTSEC, GO). Query by name+ecosystem, exact version or git commit. Parsed CVSS score + severity, affected and fixed version ranges, CWEs and CVE aliases. Batch and version-specific.

Scrapers Lat

PyPI Package Stats

brunofin/pypi-package-stats

Fetch PyPI package metadata and download stats: version, author, license, dependencies, release history, and more. Uses the official PyPI JSON API — no scraping needed.

Bruno Finger

npm Package Stats & Downloads

bgfc97/npm-package-stats

Get npm package download counts (day/week/month/year) plus metadata: latest version, license, description, repository, maintainers and publish dates. Official npm APIs. No key, no proxy.

Bruno