safedep

safedep/vet

Protect against malicious open source packages 🤖

1.1K stars 107 forks 1.1K watchers Go Apache License 2.0
devsecops golang hacktoberfest npm policy-as-code pypi rubygems security software-composition-analysis static-analysis supply-chain-security
View on GitHub Website
20 Open Issues Need Help Last updated: Jul 28, 2026

Open Issues Need Help

View All on GitHub
[Early Signal] Vet scan issues with pypi packages. 8 days ago
bug good first issue
safedep/vet
1.1K

Protect against malicious open source packages 🤖

Go
#devsecops#golang#hacktoberfest#npm#policy-as-code#pypi#rubygems#security#software-composition-analysis#static-analysis#supply-chain-security
Incorrect latest version for go package in netbird project 3 months ago
bug good first issue hacktoberfest
safedep/vet
1.1K

Protect against malicious open source packages 🤖

Go
#devsecops#golang#hacktoberfest#npm#policy-as-code#pypi#rubygems#security#software-composition-analysis#static-analysis#supply-chain-security
vet MCP Server Error Handling 3 months ago
bug good first issue hacktoberfest
safedep/vet
1.1K

Protect against malicious open source packages 🤖

Go
#devsecops#golang#hacktoberfest#npm#policy-as-code#pypi#rubygems#security#software-composition-analysis#static-analysis#supply-chain-security
Avoid Duplicate Reporting of Lockfile Poisoning in Markdown Summary Reporter 3 months ago
enhancement good first issue hacktoberfest
safedep/vet
1.1K

Protect against malicious open source packages 🤖

Go
#devsecops#golang#hacktoberfest#npm#policy-as-code#pypi#rubygems#security#software-composition-analysis#static-analysis#supply-chain-security
vet CLI recommends using --report-markdown for markdown reports, but its still shown when markdown-report is used. 3 months ago
enhancement good first issue
safedep/vet
1.1K

Protect against malicious open source packages 🤖

Go
#devsecops#golang#hacktoberfest#npm#policy-as-code#pypi#rubygems#security#software-composition-analysis#static-analysis#supply-chain-security
Add Pagination Support in vet Cloud Command 3 months ago
enhancement good first issue hacktoberfest
safedep/vet
1.1K

Protect against malicious open source packages 🤖

Go
#devsecops#golang#hacktoberfest#npm#policy-as-code#pypi#rubygems#security#software-composition-analysis#static-analysis#supply-chain-security
Color profile issues on Osaka Jade Theme 4 months ago
bug good first issue hacktoberfest
safedep/vet
1.1K

Protect against malicious open source packages 🤖

Go
#devsecops#golang#hacktoberfest#npm#policy-as-code#pypi#rubygems#security#software-composition-analysis#static-analysis#supply-chain-security
DefectDojo Reporter Fail Fast on Non-Existent Product ID 4 months ago
enhancement good first issue hacktoberfest
safedep/vet
1.1K

Protect against malicious open source packages 🤖

Go
#devsecops#golang#hacktoberfest#npm#policy-as-code#pypi#rubygems#security#software-composition-analysis#static-analysis#supply-chain-security
Experiment: Verify `pkg.insights.package_pulished_at` is working for direct dependencies in CEL expression. 5 months ago
good first issue research
safedep/vet
1.1K

Protect against malicious open source packages 🤖

Go
#devsecops#golang#hacktoberfest#npm#policy-as-code#pypi#rubygems#security#software-composition-analysis#static-analysis#supply-chain-security
`vet scan` ignores `requirements.txt` when `package.json` is present 6 months ago
bug good first issue
safedep/vet
1.1K

Protect against malicious open source packages 🤖

Go
#devsecops#golang#hacktoberfest#npm#policy-as-code#pypi#rubygems#security#software-composition-analysis#static-analysis#supply-chain-security
Migrate MCP Registry schema to new schema 6 months ago
good first issue refactor
safedep/vet
1.1K

Protect against malicious open source packages 🤖

Go
#devsecops#golang#hacktoberfest#npm#policy-as-code#pypi#rubygems#security#software-composition-analysis#static-analysis#supply-chain-security
`--report-console` UI is broken 10 months ago
bug good first issue hacktoberfest
safedep/vet
1.1K

Protect against malicious open source packages 🤖

Go
#devsecops#golang#hacktoberfest#npm#policy-as-code#pypi#rubygems#security#software-composition-analysis#static-analysis#supply-chain-security
Implement E2E Behavior Testing 10 months ago
enhancement good first issue help wanted hacktoberfest
safedep/vet
1.1K

Protect against malicious open source packages 🤖

Go
#devsecops#golang#hacktoberfest#npm#policy-as-code#pypi#rubygems#security#software-composition-analysis#static-analysis#supply-chain-security
Support go.mod Graph Parser 10 months ago
enhancement good first issue hacktoberfest
safedep/vet
1.1K

Protect against malicious open source packages 🤖

Go
#devsecops#golang#hacktoberfest#npm#policy-as-code#pypi#rubygems#security#software-composition-analysis#static-analysis#supply-chain-security
Survey NixOS for suitability as build and distribution technology 10 months ago
enhancement good first issue hacktoberfest
safedep/vet
1.1K

Protect against malicious open source packages 🤖

Go
#devsecops#golang#hacktoberfest#npm#policy-as-code#pypi#rubygems#security#software-composition-analysis#static-analysis#supply-chain-security
Handle Retries and Timeouts for vet and SafeDep Cloud Connection 10 months ago
enhancement good first issue hacktoberfest
safedep/vet
1.1K

Protect against malicious open source packages 🤖

Go
#devsecops#golang#hacktoberfest#npm#policy-as-code#pypi#rubygems#security#software-composition-analysis#static-analysis#supply-chain-security
OSV Report, json denationalization have escape characters 10 months ago
enhancement good first issue hacktoberfest
safedep/vet
1.1K

Protect against malicious open source packages 🤖

Go
#devsecops#golang#hacktoberfest#npm#policy-as-code#pypi#rubygems#security#software-composition-analysis#static-analysis#supply-chain-security
vet failes in vet action. occasionally 10 months ago
bug good first issue hacktoberfest
safedep/vet
1.1K

Protect against malicious open source packages 🤖

Go
#devsecops#golang#hacktoberfest#npm#policy-as-code#pypi#rubygems#security#software-composition-analysis#static-analysis#supply-chain-security
Dependency Usage Evidence is Not Working for Java 10 months ago
good first issue hacktoberfest
safedep/vet
1.1K

Protect against malicious open source packages 🤖

Go
#devsecops#golang#hacktoberfest#npm#policy-as-code#pypi#rubygems#security#software-composition-analysis#static-analysis#supply-chain-security
Table for Policy Violation on Filter Fail is Rendered Incorrectly 10 months ago
bug good first issue hacktoberfest
safedep/vet
1.1K

Protect against malicious open source packages 🤖

Go
#devsecops#golang#hacktoberfest#npm#policy-as-code#pypi#rubygems#security#software-composition-analysis#static-analysis#supply-chain-security