Vendor due diligence: npm and PyPI vulnerability check

Created by

Luke Mangan

Actor

npm & PyPI Package Health Check

Check a list of npm and PyPI packages in bulk for known vulnerabilities (OSV.dev), licence, deprecation and last release, with an OK / REVIEW / RISK verdict per package. Use it for vendor due diligence, security questionnaires and PCI or SOC 2 evidence, and schedule it weekly to watch your dependencies via API, Zapier, Make or n8n. Demo uses well-known open-source packages.

Try for free

npm & PyPI Package Health Checksterlingverify/package-health-check

Ecosystem

Package

Version checked

Latest version

+7 fields

Input

Packages:npm:lodash+3

ecosystem:npm+1

name:axios+1

version:0.21.0+1

Output fields

Ecosystem

Package

Version checked

Latest version

OK / REVIEW / RISK

Risk flags

Known vulnerabilities

Vulnerabilities

Licence

Days since latest release

Succeeded

How it works

Sign up on Apify or log in

The npm & PyPI Package Health Check Actor is ready to run with the inputs already set for "Vendor due diligence: npm and PyPI vulnerability check". Sign up or log in and you'll land in Apify Console with a copy of this exact task.

Start the "Vendor due diligence: npm and PyPI vulnerability check" task

The npm & PyPI Package Health Check Actor will start running based on the input automatically. You can also change all the input fields, like packages, to match your specific use case.

Receive the "Vendor due diligence: npm and PyPI vulnerability check" output

Monitor the progress in real time. You will be notified as soon as your dataset is complete and ready for review. Each result includes data such as ecosystem, package, version checked, and more.