osv
An auditing tool for detecting vulnerabilities, powered by advisory databases that follow the OSV specification.
Scan. Understand. Fix. Free, local-first JS/TS vulnerability scanner.
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.
Most security tools are built around pipelines, not developers. CVE Lite CLI scans your lockfile locally in seconds, explains the dependency path, and tells you what to update before you push.
Related contents:
Vulnerability scanner written in Go which uses the data provided by https://osv.dev. Use OSV-Scanner to find existing vulnerabilities affecting your project's dependencies. OSV-Scanner provides an officially supported frontend to the OSV database that connects a project’s list of dependencies with the vulnerabilities that affect them.