Halfblood-Prince/trustcheck

Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them

🐍 Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.

Advisory database for Python packages published on pypi.org

🐍 🔎 GuardDog is a CLI tool to Identify malicious PyPI and npm packages

deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, GitHub Actions, and more. It runs locally as a CLI and as an MCP server, comes with a skill, and a hook.

Collection of PyPI registry package manager Security Best Practices featuring uv and pip

Supply Chain Firewall (SCFW) is a tool for preventing the installation of malicious npm and PyPI packages 🔥

Security tool against dependency typosquatting attacks