Under maintenance

Pricing

Pay per usage

Try for free

Go to Apify Store

GitHub Dependency Risk Triage with OSV

Under maintenance

Try for free

Read dependency manifests through a GitHub MCP connector, check pinned versions against OSV, and create or update a source-linked review issue without changing code.

Pricing

Pay per usage

Rating

0.0

(0)

Developer

Thirdwatch

Actor stats

Bookmarked

Total users

Monthly active users

13 hours ago

Last modified

Categories

Developer tools

Automation

You can access the GitHub Dependency Risk Triage with OSV programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1from apify_client import ApifyClient
2
3# Initialize the ApifyClient with your Apify API token
4# Replace '<YOUR_API_TOKEN>' with your token.
5client = ApifyClient("<YOUR_API_TOKEN>")
6
7# Prepare the Actor input
8run_input = { "manifestPaths": [
9        "package.json",
10        "requirements.txt",
11    ] }
12
13# Run the Actor and wait for it to finish
14run = client.actor("thirdwatch/github-dependency-risk-triage").call(run_input=run_input)
15
16# Fetch and print Actor results from the run's dataset (if there are any)
17print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")
18for item in client.dataset(run.default_dataset_id).iterate_items():
19    print(item)
20
21# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

GitHub Dependency Risk Triage with OSV API in Python

The Apify API client for Python is the official library that allows you to use GitHub Dependency Risk Triage with OSV API in Python, providing convenience functions and automatic retries on errors.

Install the apify-client

$pip install apify-client

Other API clients include:

GitHub Dependency Risk Triage with OSV API in JavaScript

GitHub Dependency Risk Triage with OSV API through CLI

GitHub Dependency Risk Triage with OSV OpenAPI definition

GitHub Dependency Risk Triage with OSV API

Dependency Signal Monitor

ishekofficial/dependency-signal-monitor

Reads your repo's dependency manifests through a GitHub connector, scores each dependency for abandonment risk, and opens an issue listing the ones that are dying.

Abhishek Khanra

GitHub Repo Dependency Risk

toronto_777/github-repo-dependency-risk

Inspect public GitHub package manifests for dependency counts, lockfile presence, license, engine, and lightweight risk signals.

Steven Feng

GitHub Documentation Link Auditor

thirdwatch/github-doc-link-auditor

Read Markdown through a least-privilege GitHub MCP connector, validate public external links without cloning the repository, and create or update one review issue.

Thirdwatch

GitHub Repo & Dependency Scraper

taroyamada/github-repo-dependency-intelligence

Analyze GitHub repositories, package manifests, dependencies, and repository health signals using the GitHub REST API.

naoki anzai

Dependency Advisory Monitor — OSV & GitHub Security

nexgendata/dependency-advisory-monitor

Scan npm, PyPI, Maven, Go & more dependencies for known vulnerabilities via OSV.dev and the GitHub Advisory Database. CI/CD-ready, no login.

NexGenData

OSV-Scanner Vulnerability Checker

ayeeyee/osv-scanner-vulnerability-checker

Scan a git repository dependency manifests, package-lock.json, requirements.txt, go.sum, and more, against Google OSV.dev vulnerability database using OSV-Scanner. Get cross-ecosystem CVE matching across npm, PyPI, Go, Maven, and other package registries. $0.49 per completed scan.

Virtual Footprint LLC

OSV.dev Vulnerabilities Scraper

crawlerbros/osv-vulnerabilities-scraper

Scrape OSV.dev, Google's open vulnerability database covering NPM, PyPI, Go, Maven, NuGet, Cargo, RubyGems, GitHub Actions, OS distros, and more. Look up vulnerabilities by package, fetch a specific OSV/GHSA/CVE record, or batch-query an entire dependency tree.