Pricing

from $1.60 / 1,000 results

Try for free

Go to Apify Store

GitHub Dependency Risk Triage with OSV

Try for free

Read dependency manifests through a GitHub MCP connector, check pinned versions against OSV, and create or update a source-linked review issue without changing code.

Pricing

from $1.60 / 1,000 results

Rating

0.0

(0)

Developer

Thirdwatch

Actor stats

Bookmarked

Total users

Monthly active users

3 days ago

Last modified

Categories

Developer tools

Automation

You can access the GitHub Dependency Risk Triage with OSV programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1from apify_client import ApifyClient
2
3# Initialize the ApifyClient with your Apify API token
4# Replace '<YOUR_API_TOKEN>' with your token.
5client = ApifyClient("<YOUR_API_TOKEN>")
6
7# Prepare the Actor input
8run_input = { "manifestPaths": [
9        "package.json",
10        "requirements.txt",
11    ] }
12
13# Run the Actor and wait for it to finish
14run = client.actor("thirdwatch/github-dependency-risk-triage").call(run_input=run_input)
15
16# Fetch and print Actor results from the run's dataset (if there are any)
17print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")
18for item in client.dataset(run.default_dataset_id).iterate_items():
19    print(item)
20
21# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

GitHub Dependency Risk Triage with OSV API in Python

The Apify API client for Python is the official library that allows you to use GitHub Dependency Risk Triage with OSV API in Python, providing convenience functions and automatic retries on errors.

Install the apify-client

$pip install apify-client

Other API clients include:

GitHub Dependency Risk Triage with OSV API in JavaScript

GitHub Dependency Risk Triage with OSV API through CLI

GitHub Dependency Risk Triage with OSV OpenAPI definition

GitHub Dependency Risk Triage with OSV API

Github Dependency Signal Monitor

ishekofficial/dependency-signal-monitor

Reads your repo's dependency manifests through a GitHub connector, scores each dependency for abandonment risk, and opens an issue listing the ones that are dying.

Abhishek Khanra

Manifest to OSV Vulnerability Triage

vedder1980/osv-manifest-triage

Triages up to 500 dependency versions against the public OSV vulnerability database.

Daniel Ferreira de Almeida

GitHub Repo Dependency Risk

toronto_777/github-repo-dependency-risk

Inspect public GitHub package manifests for dependency counts, lockfile presence, license, engine, and lightweight risk signals.

Steven Feng

GitHub Documentation Link Auditor

thirdwatch/github-doc-link-auditor

Read Markdown through a least-privilege GitHub MCP connector, validate public external links without cloning the repository, and create or update one review issue.

Thirdwatch

Dependency Advisory Monitor — OSV & GitHub Security

nexgendata/dependency-advisory-monitor

Scan npm, PyPI, Maven, Go & more dependencies for known vulnerabilities via OSV.dev and the GitHub Advisory Database. CI/CD-ready, no login.

NexGenData

Dependency License Auditor

junipr/dependency-license-auditor

Audit dependency manifests for license types, unknown licenses, and policy risk.

junipr

OSV-Scanner Vulnerability Checker

ayeeyee/osv-scanner-vulnerability-checker

Scan a git repository dependency manifests, package-lock.json, requirements.txt, go.sum, and more, against Google OSV.dev vulnerability database using OSV-Scanner. Get cross-ecosystem CVE matching across npm, PyPI, Go, Maven, and other package registries. $0.49 per completed scan.

Virtual Footprint LLC

OSV.dev Vulnerabilities Scraper

crawlerbros/osv-vulnerabilities-scraper

Scrape OSV.dev, Google's open vulnerability database covering NPM, PyPI, Go, Maven, NuGet, Cargo, RubyGems, GitHub Actions, OS distros, and more. Look up vulnerabilities by package, fetch a specific OSV/GHSA/CVE record, or batch-query an entire dependency tree.