Free Tool · Powered by OSV API

Dependency Vulnerability
Checker.

Check open-source packages for known vulnerabilities using the Google OSV database. Search by single package or paste your lock file for bulk scanning. Supports npm, PyPI, Go, Maven, and more.

📦

Dependency Scanner

Related free tools

CVE Search

Look up any CVE by ID or keyword and filter by CVSS severity.

SRI Hash Generator

Generate Subresource Integrity hashes so a tampered CDN script cannot load.

Semver Range Calculator

See exactly which versions your lockfile ranges resolve to.

Read next

SCA vs dependency scan: what is the difference?

Why a lockfile lookup misses transitive, vendored and reachability context — and what full SCA adds.
One lockfile, once, is not a process

Scan every lockfile in
every repo, on every push.

AquilaX SCA resolves the full transitive tree across npm, pip, Maven, Go, Cargo and more, flags licence conflicts, and opens upgrade PRs for vulnerable packages — with Securitron AI suppressing the unreachable ones.

Scan my repos for free → How AquilaX SCA works

Free plan is permanent · unlimited scans · GitHub, GitLab, Bitbucket & Azure DevOps