keywords:osv - npm search

delivery-intel

Evidence-driven repo intelligence: DORA metrics, forensic signals, vulnerability scan, and delivery verdict for any GitHub repo. One command, no setup.

parthibanrajasekaran

published version 1.7.0, 2 months ago0 dependents licensed under $MIT

335,095

@bun-security-scanner/osv

OSV vulnerability scanner for Bun projects

maloma7

published version 1.0.0, 7 months ago0 dependents licensed under $MIT

16,723

yarn-osv-audit

Audit Yarn v1 lockfiles against the OSV vulnerability database

GitHub Actions

published version 0.1.8, 2 months ago0 dependents licensed under $MIT

15,596

cve-lite-cli

Developer-friendly CLI for scanning JS/TS projects for dependency vulnerabilities using local lockfiles and OSV

sonukapoor

published version 1.23.0, a day ago0 dependents licensed under $MIT

6,602

bun-scan

Vulnerability scanner for Bun projects

GitHub Actions

published version 1.1.2, 2 months ago0 dependents licensed under $MIT

3,457

pastoralist

Audit, secure, and clean up package manager overrides for npm, pnpm, Yarn, and Bun.

GitHub Actions

published version 1.12.5, 15 hours ago0 dependents licensed under $MIT

2,519

In-app dev companion for React. Floating button + drawer with viewport switcher, route map, SEO/Performance/Tracker checks and dependency vulnerability scanning. Zero config in dev, invisible in production.

promise-inc

published version 0.2.6, 20 days ago0 dependents licensed under $MIT

1,690

@datanexusmcp/mcp-server

DataNexus MCP — AI-Ready public data intelligence. 55 tools: CVE risk verdicts, SBOM licence policy, frontend security (manifest audit, CI scanner, typosquatting), licence compatibility, nonprofit 990 trends, SBOM monitoring, federal contracts, NPI lookup

datanexusmcp

published version 2.4.9, 3 days ago0 dependents licensed under $SEE LICENSE IN LICENSE

2,278

@opencodehub/scanners

OpenCodeHub — Priority-1 scanner wrappers (semgrep, betterleaks, osv-scanner, bandit, biome)

GitHub Actions

published version 0.2.4, 13 days ago1 dependents licensed under $Apache-2.0

1,374

fad-checker

Scan ALL Maven, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSAF/SARIF/

n8tz

published version 2.2.4, 10 days ago0 dependents licensed under $MIT

1,637

@aldegad/safedeps

Dependency install safety gate with OSV-backed advisory checks, approved-spec ledger enforcement, and reorg rollback hooks

aldegad

published version 2.6.1, 8 days ago0 dependents licensed under $Apache-2.0

1,350

@open-secure-viewer/irm

IRM key exchange module for Open Secure Viewer — RSA-4096 + AES-GCM WebCrypto

prabhakarkumar

published version 9.1.0, 19 days ago0 dependents licensed under $MIT

1,952

@open-secure-viewer/react

React components and hooks for @open-secure-viewer/core secure PDF/Office viewer. Drop-in replacement for Apryse WebViewer React integration.

prabhakarkumar

published version 9.0.2, 19 days ago0 dependents licensed under $Apache-2.0

1,669

supply-chain-inspector

Standalone, zero-dependency CLI for npm supply chain security analysis — vulnerability scanning, OpenSSF Scorecard, install-script detection, publisher history, and more.

GitHub Actions

published version 1.10.0, 12 days ago0 dependents licensed under $Apache-2.0

1,010

vibe-hardening

One-command security scanner for AI-generated code. Vibe coded. Vibe hardened.

angletech2026

published version 0.4.0, a month ago0 dependents licensed under $MIT

996

@api-hooks/osv

React hooks for the OSV (Open Source Vulnerabilities) API, built on @tanstack/react-query

pilmee

published version 1.5.1, 6 days ago0 dependents licensed under $MIT

806

@open-secure-viewer/office

DOCX and XLSX renderers for @open-secure-viewer/core. Powered by docx-preview and SheetJS.

prabhakarkumar

published version 2.1.3, 19 days ago0 dependents licensed under $Apache-2.0

1,246

@arcane-spark/ubel-node

Supply-chain security firewall for Node.js — resolves dependencies, scans via OSV.dev and NVD, and enforces configurable vulnerability policies before anything reaches node_modules.