You can access the Manifest to OSV Vulnerability Triage programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1from apify_client import ApifyClient
2
3# Initialize the ApifyClient with your Apify API token
4# Replace '<YOUR_API_TOKEN>' with your token.
5client = ApifyClient("<YOUR_API_TOKEN>")
6
7# Prepare the Actor input
8run_input = { "packages": [{
9            "name": "lodash",
10            "version": "4.17.20",
11            "ecosystem": "npm",
12        }] }
13
14# Run the Actor and wait for it to finish
15run = client.actor("vedder1980/osv-manifest-triage").call(run_input=run_input)
16
17# Fetch and print Actor results from the run's dataset (if there are any)
18print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")
19for item in client.dataset(run.default_dataset_id).iterate_items():
20    print(item)
21
22# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

OSV vulnerability triage for dependency manifests API in Python

The Apify API client for Python is the official library that allows you to use Manifest to OSV Vulnerability Triage API in Python, providing convenience functions and automatic retries on errors.

Install the apify-client

$pip install apify-client

Other API clients include:

Manifest to OSV Vulnerability Triage API in JavaScript

Manifest to OSV Vulnerability Triage API through CLI

Manifest to OSV Vulnerability Triage OpenAPI definition

Manifest to OSV Vulnerability Triage API

OSV Vulnerability Scraper - Package Risk Data

benthepythondev/osv-vulnerability-scraper

Scrape OSV vulnerability data for open-source packages: CVE/GHSA IDs, summaries, affected ranges and references.

Ben

OSV Open Source Vulnerabilities Scraper

parseforge/osv-vulnerabilities-scraper

Scrapes open source vulnerability records from the OSV catalogue by package, version, commit, or vulnerability ID. Returns each advisory as a flat row with aliases, affected versions, and severity scores.

ParseForge

Open Source Dependency Vulnerability Scanner

scrapemint/dependency-vulnerability-scanner

Scan dependencies against the OSV.dev database. Supply packages as ecosystem:name@version (npm, PyPI, Go, Maven, crates.io and more); get one row per known vulnerability with OSV/GHSA id, CVE aliases, severity, affected range, and the fix version. Dedupe mode gives a new-vulnerability feed.

Ken M

5.0

OSV-Scanner Vulnerability Checker

ayeeyee/osv-scanner-vulnerability-checker

Scan a git repository dependency manifests, package-lock.json, requirements.txt, go.sum, and more, against Google OSV.dev vulnerability database using OSV-Scanner. Get cross-ecosystem CVE matching across npm, PyPI, Go, Maven, and other package registries. $0.49 per completed scan.

Virtual Footprint LLC

GitHub Dependency Risk Triage with OSV

thirdwatch/github-dependency-risk-triage

Read dependency manifests through a GitHub MCP connector, check pinned versions against OSV, and create or update a source-linked review issue without changing code.

Thirdwatch

AI Agent Stack Dependency Vulnerability Scanner

kingii98/ai-agent-stack-dependency-vulnerability-scanner

Resolve packages from a supplied dependency manifest, query the public OSV.dev advisory database, and return a ranked, import-checked fix list plus one pass/fail gate.

kingii98

OSV Package Vulnerability Monitor

orbiscribe/osv-package-vulnerability-monitor

Monitor package vulnerability records from OSV.dev for npm, PyPI, Go, Maven, crates.io, RubyGems, and SBOM-derived package lists.

Orbiscribe Labs

Open Source Vulnerability Monitor

silicon1235/open-source-vulnerability-monitor

OSV vulnerability monitor for public open-source package advisory changes, severity filters, and fix-aware alerts.

X L

Open Source Vulnerability Scraper (OSV.dev)

chrisp1211/vulnerability-scraper-max

Look up open-source security vulnerabilities from OSV.dev for any package across npm, PyPI, Go, Maven, crates and more. Returns CVE IDs, severity, summary and references. No API key. Pay per vulnerability; empty runs free.

Christian Pichichero

OSV.dev Vulnerabilities Scraper

crawlerbros/osv-vulnerabilities-scraper

Scrape OSV.dev, Google's open vulnerability database covering NPM, PyPI, Go, Maven, NuGet, Cargo, RubyGems, GitHub Actions, OS distros, and more. Look up vulnerabilities by package, fetch a specific OSV/GHSA/CVE record, or batch-query an entire dependency tree.