Do your dependencies have known vulnerabilities?

Upload your project's dependency file; we match the versions of the packages you use against known vulnerabilities and show which ones need updating. No account needed, free.

Drop your dependency file here, or choose one

package.json · package-lock.json · yarn.lock · requirements.txt · go.mod · Cargo.lock · Gemfile.lock · composer.lock · pom.xml · CycloneDX / SPDX

The file is not uploaded; only package names and versions are matched with OSV. Nothing is stored.