Pricing

from $30.00 / 1,000 vulnerability results

Go to Apify Store

OSV Package Vulnerability Scanner

Try for free

Find vulnerabilities for npm, PyPI, Maven, Go, NuGet, RubyGems, and crates.io packages.

Pricing

from $30.00 / 1,000 vulnerability results

Rating

0.0

(0)

Developer

Technical Dost Solutions

Actor stats

Bookmarked

Total users

Monthly active users

2 days ago

Last modified

Why this can sell

Exact Store gap checked: OSV package searches showed near-zero direct supply.
Buyer intent is commercial: compliance, security, legal, regulatory, or competitive-intelligence workflows.
The Actor uses stable public APIs or official public feeds, so it can run on schedules without expensive browser proxy overhead.

Input

Run with the defaults for a sample dataset. Narrow the query fields for production monitoring.

Output

The default dataset contains normalized records with these fields:

packageName
ecosystem
version
vulnerabilityId
summary
severity
fixedVersions
publishedAt
modifiedAt
sourceUrl

Monetization

Best fit: pay per vulnerability row or low monthly subscription for scheduled monitoring.

Notes

This Actor is designed as a reliable data product, not a brittle webpage scraper. Always validate regulated or legal data against the linked source before making business decisions.

Dependency Supply-Chain Risk Audit

scrapeworks/dependency-risk-audit

Audit your package.json or requirements.txt for supply-chain risk: known vulnerabilities (OSV), deprecated/abandoned packages, and a project-level risk score.

Nicolas van Arkens

DepGuard - Dependency Vulnerability Scanner

george.the.developer/depguard-dependency-vulnerability-scanner

Scan your dependencies for known vulnerabilities over OSV.dev and flag the ones CISA lists as actively exploited, so you patch the dangerous bugs first. Packages or a lockfile in, normalized vulnerability rows out. No API key, standby ready.

George Kioko

SBOM Vulnerability Scanner — Lockfile CVE Scan (OSV/KEV)

malonestar/sbom-vulnerability-rollup

SBOM vulnerability scanner: paste an npm, pip or go lockfile and get a prioritized CVE report with upgrade targets. Batch-queries OSV.dev, flags CISA KEV known-exploited vulns, adds NVD CVSS, and computes the minimum fix version per package plus a severity rollup. Keyless.

Kyle Maloney

NPM Lockfile Threat Scanner – Compromised Package Checker

halcyon_twine/npm-lockfile-threat-scanner

Check package-lock.json, yarn.lock or pnpm-lock.yaml for known-malicious (compromised) package versions — supply-chain attack triage in seconds, no install needed.

Jeff Rogers

OSV Open Source Vulnerabilities Scraper

parseforge/osv-vulnerabilities-scraper

Query the OSV.dev open-source vulnerabilities database. Search by package (PyPI/npm/Go/Maven/RubyGems/crates.io/NuGet/Packagist), commit hash, or fetch a specific vulnerability by ID. Returns affected ranges, CVE aliases, severity, and references.

ParseForge

NIST NVD CVE Scraper

parseforge/nist-nvd-cve-scraper

Scrape CVE vulnerabilities from the NIST National Vulnerability Database (NVD) API 2.0. Filter by severity, CWE, keyword, date range, or single CVE ID. Returns CVSS v3/v2 scores, CWE weaknesses, CPE configurations, and references.

ParseForge

PyPI Packages Scraper

parseforge/pypi-packages-scraper

Pull Python package data from PyPI. Returns name, version, summary, description, classifiers, license, author, project URLs (homepage, source, issues, docs), Python version requirement, dependencies, release history, last upload, and total release count. Direct lookup by package name.

ParseForge

GitHub Security Advisories Scraper

parseforge/github-security-advisories-scraper

Scrape the GitHub Global Security Advisories database. Filter by type (reviewed/unreviewed/malware), severity, affected package, CVE/GHSA ID, or publish date. Returns CVSS, CWE, affected version ranges, patched versions, references, and credits.

ParseForge

CISA KEV Known Exploited Vulnerabilities Scraper

parseforge/cisa-kev-scraper

Scrape the CISA Known Exploited Vulnerabilities (KEV) catalog. Filter by CVE ID, vendor, product, or date added. Returns required actions, due dates, ransomware campaign use, and CWE references for every actively-exploited CVE tracked by CISA.

ParseForge