Free · No account required

Scan your dependencies

Parsing is done entirely in your browser. We check package names and versions against 21,000+ malware advisories. Your files are never stored or tracked.

Results in seconds No data stored Client-side parsing
package-lock.jsonpnpm-lock.yamlyarn.lockuv.lockpoetry.lock
No file loaded

This is a fast public-advisory check, not a full audit. For a deep analysis that catches brand-new threats before they're in the database, see Hacktron Review.