Dependency Risk Check for npm & PyPI
Pricing
from $6.00 / 1,000 package checkeds
Check npm and PyPI packages in one call: known vulnerabilities with EPSS exploit probability and CISA KEV status, OpenSSF Scorecard, license and end-of-life status, plus a 0-100 risk score and an upgrade suggestion.
You can access the Dependency Risk Check for npm & PyPI programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.
$echo '{< "packages": [< "npm:lodash@4.17.20",< "npm:express",< "pypi:requests==2.25.0",< "pypi:django==3.2.0"< ]<}' |<apify call uxz7/dependency-risk-check --silent --output-datasetThe Apify CLI is the official tool that allows you to use Dependency Risk Check for npm & PyPI locally, providing convenience functions and automatic retries on errors.
Using installation script (macOS/Linux):
$curl -fsSL https://apify.com/install-cli.sh | bashUsing installation script (Windows):
$irm https://apify.com/install-cli.ps1 | iexUsing Homebrew:
$brew install apify-cliUsing npm:
$npm install -g apify-cliOther API clients include: