Pricing

$5.00 / 1,000 results

Try for free

Go to Apify Store

npm & PyPI Package Health + Vulnerability Check (OSV)

Try for free

Check npm and PyPI packages, or a whole package.json or requirements.txt, for known vulnerabilities (CVEs from OSV.dev), the safe version to upgrade to, deprecated or yanked releases, outdated versions, license, and popularity. No API key needed.

Pricing

$5.00 / 1,000 results

Rating

0.0

(0)

Developer

CreativeFour LLC

Actor stats

Bookmarked

Total users

Monthly active users

2 days ago

Last modified

Categories

You can access the npm & PyPI Package Health + Vulnerability Check (OSV) programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1from apify_client import ApifyClient
2
3# Initialize the ApifyClient with your Apify API token
4# Replace '<YOUR_API_TOKEN>' with your token.
5client = ApifyClient("<YOUR_API_TOKEN>")
6
7# Prepare the Actor input
8run_input = { "packages": [
9        "lodash@4.17.15",
10        "requests==2.19.0",
11        "express",
12    ] }
13
14# Run the Actor and wait for it to finish
15run = client.actor("creativefour/package-vulnerability-check").call(run_input=run_input)
16
17# Fetch and print Actor results from the run's dataset (if there are any)
18print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")
19for item in client.dataset(run.default_dataset_id).iterate_items():
20    print(item)
21
22# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

npm & PyPI Package Health + Vulnerability Check (OSV) API in Python

The Apify API client for Python is the official library that allows you to use npm & PyPI Package Health + Vulnerability Check (OSV) API in Python, providing convenience functions and automatic retries on errors.

Install the apify-client

$pip install apify-client

Other API clients include:

npm & PyPI Package Health + Vulnerability Check (OSV) API in JavaScript

npm & PyPI Package Health + Vulnerability Check (OSV) API through CLI

npm & PyPI Package Health + Vulnerability Check (OSV) OpenAPI definition

npm & PyPI Package Health + Vulnerability Check (OSV) API

npm, PyPI & crates.io Package Intelligence

optirefine/package-intelligence

Bulk package health, vulnerabilities and dependency data for npm, PyPI and crates.io. One row per package: version, licence, maintainers, downloads, OSV advisories, deps.dev dependency counts, and a 0-100 health score.

OptiRefine

OSS Package Health & Vulnerability API

ai-coding-radar/oss-package-health-monitor

Scan installed npm and PyPI versions for OSV vulnerabilities and CISA KEV matches. Compare checked vs latest versions, licenses, repositories, and npm downloads in JSON, CSV, or Excel. Transparent source status; no login, token, proxy, or private package access.

AI Coding Radar

Dependency Supply-Chain Risk Audit

scrapeworks/dependency-risk-audit

Audit your package.json or requirements.txt for supply-chain risk: known vulnerabilities (OSV), deprecated/abandoned packages, and a project-level risk score.

Nicolas van Arkens

npm, PyPI & Crates.io Package Health Checker

webdatatools/package-health-checker

Package health checker for npm, PyPI and Crates.io — deprecation, last publish date, licence, weekly downloads, maintainers, GitHub stars and a 0-100 health score, one row per package.

Murat Uzun

Dependency Vulnerability Advisor — Find Fixes, Not Just CVEs

alaudinburki/dependency-vulnerability-advisor

Check your dependencies against the OSV database and get the exact version to upgrade to. Returns an upgrade plan — one target version per package that clears the most findings at once — instead of a list of CVE IDs you still have to research.

alaudin burki

Dependency Audit — CVE, License & EOL Check for AI

haketa/dependency-audit

Audit any software dependency for vulnerabilities (CVE), license, deprecation, end-of-life and health scores in one call. Supports npm, PyPI, crates, Go, Maven, NuGet, RubyGems. Supply-chain security grounding for AI coding agents & SCA.

Haketa

Package Intel: npm + PyPI Metadata & Vulnerability Scraper

studious_allergy_mig/package-intel-scraper

Normalized npm and PyPI package metadata plus OSV.dev vulnerability signals for dependency auditing and supply-chain monitoring.

Conor G

OSV-Scanner Vulnerability Checker

ayeeyee/osv-scanner-vulnerability-checker

Scan a git repository dependency manifests, package-lock.json, requirements.txt, go.sum, and more, against Google OSV.dev vulnerability database using OSV-Scanner. Get cross-ecosystem CVE matching across npm, PyPI, Go, Maven, and other package registries. $0.49 per completed scan.

Virtual Footprint LLC

🛡️ GitHub Org Security & Dependency Auditor

automation_studio/github-org-security-auditor

Audits public GitHub organizations for unpatched CVE vulnerabilities (via Google OSV), outdated software dependencies, copyleft license risks (GPL/AGPL), and sensitive configuration file templates.

Automation Studio

CVE Security Advisory Monitor — AI Agent Vulnerability API

logiover/cve-security-advisory-monitor

Keyless vulnerability intelligence for AI agents: NVD + GitHub Security Advisories + OSV merged. Daily new CVEs, keyword search, or product/package lookups. CVSS scores, weaknesses, affected versions, patch info and references per row. No API key, no browser.

Logiover

deps.dev Package Insights Scraper

parseforge/deps-dev-package-insights-scraper

Scrapes deps.dev for package insights across six ecosystems. Returns one flat row per package with dependencies, versions, licenses, and security advisories.