Footer

Your go-to destination for discovering trending open-source projects and uncovering the insights that matter

Legal

  • Terms and conditions
  • Privacy policy

More

  • Pricing
  • Advertise
  • onedump
  • gosnakego
  • Contact us

Social

  • X (Twitter)
  • GitHub
Trendshift owl
What they build speaks louder than words
© 2026 Trendshift, created by Julian Li with ❤️
SignalAdvertise
Trendshift
SignalAdvertise
Sign in
Trendshift owl

Discover trends that matter

DailyWeeklyMonthlyYearly
Live mentionsTopics
RepositoriesDevelopers
InsightsStats

ClawBench
ClawBench
Bifrost
Bifrost

clidey/deptrust

deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, GitHub Actions, and more. It runs locally as a CLI and as an MCP server, comes with a skill, and a hook.

Visit GitHub
Go
61
4
2 contributors
MIT License
FeaturedAdvertise to 180K+ monthly visitors
ClawBench

a benchmark for personal agents

Bifrost

Enterprise AI Gateway Built For Scale: Route, Govern, and Secure All Your AI Traffic

Momentum

How fast clidey/deptrust is gaining stars, and where it lands on Trendshift and GitHub Trending

Activity and trending

Stars, forks and merged pull requests each day or month, lined up with the repository's rank on Trendshift Trending

Oct 9 – Oct 24, 2026

Stars +0 in 16 days

01

Forks +0 in 16 days

01

Merged PRs 4 in 16 days

024
4

Trendshift Trendingwhere the repository ranked each day it made the top 25

Not in the Trendshift top 25 in this period

Oct 9Oct 11Oct 13Oct 15Oct 17Oct 19Oct 21Oct 23
The left and right arrow keys step from day to day; Home and End go to the first and the last

Stars, forks, merged pull requests and Trendshift Trending rank, by day
DayStars gainedForks gainedMerged PRs
Fri, Oct 9, 2026+0+04
Sat, Oct 10, 2026+0+00
Sun, Oct 11, 2026+0+00
Mon, Oct 12, 2026+0+00
Tue, Oct 13, 2026+0+00
Wed, Oct 14, 2026+0+00
Thu, Oct 15, 2026+0+00
Fri, Oct 16, 2026+0+00
Sat, Oct 17, 2026+0+00
Sun, Oct 18, 2026+0+00
Mon, Oct 19, 2026+0+00
Tue, Oct 20, 2026+0+00
Wed, Oct 21, 2026+0+00
Thu, Oct 22, 2026+0+00
Fri, Oct 23, 2026+0+00
Sat, Oct 24, 2026+0+00
Total+0+04
  • 1#1 on the list
  • 7Rank that day
  • Not trending

Social mentions

Recent discussions about this repository across the web
  1. Jul 11 post
    • Show HN: CLI that helps AI agents avoid vulnerable dependencies

      Read full on Hacker News

      Hacker News

You might also like

Repositories close to clidey/deptrust
FeaturedAdvertise to 180K+ monthly visitors
ClawBench

a benchmark for personal agents

Bifrost

Enterprise AI Gateway Built For Scale: Route, Govern, and Secure All Your AI Traffic

safedep/vet

Go

Protect against malicious open source packages 🤖

1.1k118

DataDog/guarddog

Python

🐍 🔎 GuardDog is a CLI tool to Identify malicious PyPI and npm packages

1.2k131

SocketDev/socket-mcp

TypeScript

Model Context Protocol server for socket.dev integration

13749

projectdiscovery/depx

Go

Malicious package & supply-chain intelligence

19920

ai/multiocular

TypeScript

ꙮ Review dependencies changes to prevent supply chain attack

2106

google/osv-scanner-action

Python
9941

SocketDev/socket-cli

TypeScript

Command-line interface for socket.dev security analysis

33673

mkbhardwas12/pwned-deps

Python

Is your lockfile pwned? 5-second scan of npm/PyPI/Maven/Cargo/Go/RubyGems lockfiles for compromised packages — OSV + curated campaign feed, --min-age cooling-off gate, exit 4 when a scan is incomplete. SLSA L3, Sigstore-signed feed.

164174

elementsinteractive/twyn

Python

Security tool against dependency typosquatting attacks

567