Pricing

from $1.00 / 1,000 results

Dependency Supply-Chain Risk Audit

Audit your package.json or requirements.txt for supply-chain risk: known vulnerabilities (OSV), deprecated/abandoned packages, and a project-level risk score.

Pricing

from $1.00 / 1,000 results

Rating

0.0

(0)

Developer

Nicolas van Arkens

Actor stats

Bookmarked

Total users

Monthly active users

2 days ago

Last modified

Categories

Developer tools

Other

Manifest file contents

manifestText

Optional

Paste the full contents of your package.json (npm) or requirements.txt (Python/PyPI). Every dependency listed will be audited for vulnerabilities and health.

Type:string

Manifest type

manifestType

Optional

How to interpret the pasted manifest. 'auto' detects package.json (starts with '{') vs requirements.txt.

Type:string

Default:auto

Options:

autopackage.jsonrequirements.txt

Check known vulnerabilities (OSV)

checkVulnerabilities

Optional

Cross-reference each dependency against the OSV vulnerability database for known CVEs/advisories. Adds one lookup per package. If disabled, packages are scored on health signals only.

Type:boolean

Default:true

Maximum dependencies

maxDependencies

Optional

Cap on how many dependencies to audit from the manifest.

Type:integer

Minimum:1

Maximum:2000

Default:200

Rust-Crates-Scraper

sage_gate/rust-crates-scraper

Scrape Rust crates from crates.io. Get download stats, dependencies, health scores, and package metadata for supply chain analysis.

Julia P.

GitHub Dependency Health Checker

scrapeworks/github-dependency-health

Score the maintenance health and abandonment risk of GitHub dependencies. Returns a 0-100 health score, verdict, and risk flags per repo.

Nicolas van Arkens

PyPI Package Metadata Monitor (Pythia)

apricot_blackberry/pythia-pypi

Fetch structured metadata for any PyPI package. Returns latest version, up to 10 most-recent releases with publish dates, total release count, author, license, and Python version requirement.

Creator Fusion

GitHub Repo Search — Stars, Language & Topics

ryanclinton/github-repo-search

Search and scrape GitHub repositories by keyword, language, stars, forks, or topic. Extract structured repo metadata including owner, license, topics, and activity timestamps. Sort by stars, forks, or recently updated. Export to JSON, CSV, or API. No token required.

Ryan Clinton

5.0

(1)

Open Source Software Supply Chain MCP Server

ryanclinton/open-source-software-supply-chain-mcp

OSS dependency risk and SBOM compliance intelligence for application security teams, engineering leadership, and procurement.

Ryan Clinton

Open Source Supply Chain Risk MCP

ryanclinton/open-source-supply-chain-risk-mcp

OSS supply chain risk intelligence with dependency graph propagation, bus-factor analysis, and typosquat detection.

Ryan Clinton

OSS Dependency Risk Report — Bus Factor, CVEs & SBOM Compliance

ryanclinton/oss-dependency-risk-report

Analyze the risk profile of any open-source package or repository by querying 7 data sources in parallel — GitHub repositories, NVD CVE vulnerabilities, CISA Known Exploited Vulnerabilities (KEV), StackExchange discussions, Hacker News mentions, Federal Register SBOM regulations, and Congress...

Ryan Clinton

Website Asset & Script Extractor

andok/asset-extractor

Extract all CSS stylesheets and JavaScript files loaded on a webpage for technical SEO audits and performance optimization.

Andok

Maven Central Scraper | Java Package Metadata

parseforge/maven-central-scraper

Extract Java and Kotlin artifacts from Maven Central including group ID, artifact ID, version history, dependencies, publisher, packaging, and license info. Audit JVM dependencies, track ecosystem trends, or feed developer security, SBOM, and intelligence tools at scale.

ParseForge

Logistics Freight Intelligence

ryanclinton/logistics-freight-intelligence

Batch supply chain risk intelligence per entity. One run returns composite score, decision profile, materiality, velocity, escalation policy, mitigation plans, governance, audit replay. 9 official data sources. Bulk-friendly. For ERP, BI, Zapier, Make, n8n. Pay per entity.

Ryan Clinton