OSV Open Source Dependency CVE Scanner
Under maintenancePricing
$3.00 / 1,000 extracted data record / events
OSV Open Source Dependency CVE Scanner
Under maintenanceScan software packages across npm, PyPI, Go, and Maven for known CVEs using Google's official OSV.dev vulnerability database.
Pricing
$3.00 / 1,000 extracted data record / events
Rating
0.0
(0)
Developer
Deepak Sheoran
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
3 hours ago
Last modified
Categories
Share
Canonical Approved Idea #2 | Cluster:
A · Supply chain| Tier3
Official Data Source:Google OSV.dev Vulnerability API(https://api.osv.dev/v1/query)
Target Buyer: Dev teams, AppSec, CI owners
Job-To-Be-Done: Paste package name and version, get CVEs, fixed versions, and severity
🤖 AI Agent & MCP Tool Integration
Use this tool when you need real-time, deterministic, structured data for osv-dependency-cve-scanner without maintaining headless browsers or managing proxies.
- MCP Tool Name:
osv-dependency-cve-scanner - Pricing: Pay-Per-Event (PPE) at
$0.003per verifiedresult-item. Free tier runs available on Apify Cloud. - Input Parameters: Fully configurable via JSON schema (all parameters have verified defaults).
- Output Format: Clean JSON / CSV formatted dataset records conforming to standard schemas.
What It Does
Scan software packages across npm, PyPI, Go, and Maven for known CVEs using Google's official OSV.dev vulnerability database.
Why This Actor vs Raw Source API
- Pre-Normalized & Enriched: Converts raw upstream responses into uniform, RFC-compliant JSON records with UTC timestamps.
- Zero Infrastructure Overhead: Run ad-hoc or on a recurring schedule without managing cloud servers, API keys, or rate-limit backoffs.
- Built-in Enterprise Security: Built-in SSRF protection, IP verification, and CSV formula injection sanitization.
Transparent Pay-Per-Event (PPE) Pricing
- Free Preview Tier: First 10 qualifying records free per run.
- Paid Rate: $0.003 per qualifying record ($3.00 per 1,000 records).
- Zero Charge Guarantee: No charges for empty runs, network failures, or invalid inputs.
Input Parameters
| Parameter | Type | Required | Description | Default / Example |
|---|---|---|---|---|
packageName | string | Yes | Package identifier (e.g. lodash, requests) | lodash |
ecosystem | string | No | Ecosystem (npm, PyPI, Maven, Go) | npm |
version | string | No | Target version string | 4.17.20 |
maxItems | integer | No | Maximum records to return | 10 |
Output Fields
| Field | Type | Provenance | Description |
|---|---|---|---|
vulnId | string | DIRECT_SOURCE | OSV / CVE Identifier |
packageName | string | DIRECT_SOURCE | Target package name |
ecosystem | string | DIRECT_SOURCE | Package ecosystem |
summary | string | DIRECT_SOURCE | Vulnerability summary |
details | string | DIRECT_SOURCE | Full advisory details |
published | string | DIRECT_SOURCE | Publication timestamp |
aliases | array | DIRECT_SOURCE | CVE aliases (e.g. CVE-2021-23337) |
Truth-in-Advertising & Boundaries
[!IMPORTANT]
- Authoritative Source: Data is retrieved directly from
Google OSV.dev Vulnerability APIwithout synthetic generation.- Availability: Subject to official upstream server availability and rate limits.
- No Legal Advice: Regulatory and sanctions records are provided for operational intelligence and do not constitute formal legal counsel.
💰 Transparent Pay-Per-Event (PPE) Pricing
This Actor operates under Apify's Pay-Per-Event (PPE) monetization model:
- Primary Event:
result-item - Rate:
$0.003per successfully extracted and delivered data record. - Zero-Charge-on-Error Guarantee: You are never charged for empty results, network errors, timeouts, or diagnostic logs.
- Free Preview Available: Test runs on Apify Cloud allow free initial evaluations before scaling.
