mkbhardwas12

mkbhardwas12/pwned-deps

Is your lockfile pwned? 5-second scan of npm/PyPI/Maven/Cargo/Go/RubyGems lockfiles for compromised packages — OSV + curated campaign feed, --min-age cooling-off gate, exit 4 when a scan is incomplete. SLSA L3, Sigstore-signed feed.

164 stars 172 forks 164 watchers Python Apache License 2.0
cargo cli dependency-scanner devsecops go lockfile maven npm osv pypi python rubygems sarif sca security sigstore slsa supply-chain supply-chain-security vulnerability-scanner
View on GitHub Website
6 Open Issues Need Help Last updated: Sep 20, 2026

Open Issues Need Help

View All on GitHub
SBOM input: scan CycloneDX / SPDX documents 3 days ago
help wanted roadmap
mkbhardwas12/pwned-deps
164

Is your lockfile pwned? 5-second scan of npm/PyPI/Maven/Cargo/Go/RubyGems lockfiles for compromised packages — OSV + curated campaign feed, --min-age cooling-off gate, exit 4 when a scan is incomplete. SLSA L3, Sigstore-signed feed.

Python
#cargo#cli#dependency-scanner#devsecops#go#lockfile#maven#npm#osv#pypi#python#rubygems#sarif#sca#security#sigstore#slsa#supply-chain#supply-chain-security#vulnerability-scanner
Docker image + GitLab CI template 3 days ago
help wanted good first issue roadmap
mkbhardwas12/pwned-deps
164

Is your lockfile pwned? 5-second scan of npm/PyPI/Maven/Cargo/Go/RubyGems lockfiles for compromised packages — OSV + curated campaign feed, --min-age cooling-off gate, exit 4 when a scan is incomplete. SLSA L3, Sigstore-signed feed.

Python
#cargo#cli#dependency-scanner#devsecops#go#lockfile#maven#npm#osv#pypi#python#rubygems#sarif#sca#security#sigstore#slsa#supply-chain#supply-chain-security#vulnerability-scanner
Campaign: backfill compromised_maintainers windows for historic account hijacks 3 days ago
help wanted good first issue campaign
mkbhardwas12/pwned-deps
164

Is your lockfile pwned? 5-second scan of npm/PyPI/Maven/Cargo/Go/RubyGems lockfiles for compromised packages — OSV + curated campaign feed, --min-age cooling-off gate, exit 4 when a scan is incomplete. SLSA L3, Sigstore-signed feed.

Python
#cargo#cli#dependency-scanner#devsecops#go#lockfile#maven#npm#osv#pypi#python#rubygems#sarif#sca#security#sigstore#slsa#supply-chain#supply-chain-security#vulnerability-scanner
Registry publish timestamps for crates.io, RubyGems, Go, Maven (extends --min-age) 3 days ago
help wanted roadmap
mkbhardwas12/pwned-deps
164

Is your lockfile pwned? 5-second scan of npm/PyPI/Maven/Cargo/Go/RubyGems lockfiles for compromised packages — OSV + curated campaign feed, --min-age cooling-off gate, exit 4 when a scan is incomplete. SLSA L3, Sigstore-signed feed.

Python
#cargo#cli#dependency-scanner#devsecops#go#lockfile#maven#npm#osv#pypi#python#rubygems#sarif#sca#security#sigstore#slsa#supply-chain#supply-chain-security#vulnerability-scanner
Parser: NuGet (packages.lock.json) 3 days ago
help wanted good first issue parser roadmap
mkbhardwas12/pwned-deps
164

Is your lockfile pwned? 5-second scan of npm/PyPI/Maven/Cargo/Go/RubyGems lockfiles for compromised packages — OSV + curated campaign feed, --min-age cooling-off gate, exit 4 when a scan is incomplete. SLSA L3, Sigstore-signed feed.

Python
#cargo#cli#dependency-scanner#devsecops#go#lockfile#maven#npm#osv#pypi#python#rubygems#sarif#sca#security#sigstore#slsa#supply-chain#supply-chain-security#vulnerability-scanner
Parser: Composer (composer.lock) for Packagist 3 days ago
help wanted good first issue parser roadmap
mkbhardwas12/pwned-deps
164

Is your lockfile pwned? 5-second scan of npm/PyPI/Maven/Cargo/Go/RubyGems lockfiles for compromised packages — OSV + curated campaign feed, --min-age cooling-off gate, exit 4 when a scan is incomplete. SLSA L3, Sigstore-signed feed.

Python
#cargo#cli#dependency-scanner#devsecops#go#lockfile#maven#npm#osv#pypi#python#rubygems#sarif#sca#security#sigstore#slsa#supply-chain#supply-chain-security#vulnerability-scanner