pypa/advisory-database

A curated database of insecure Python packages

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

A database of vulnerable Ruby Gems

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.

Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them

A database of PHP security advisories

🐍 🔎 GuardDog is a CLI tool to Identify malicious PyPI and npm packages

A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.

Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration