Dependency Security Watcher

Watches up to 5 public GitHub repos (3 manifests each: package.json, requirements.txt, pyproject.toml, Cargo.toml, go.mod) for known vulnerabilities. It reads one manifest per tick (raw.githubusercontent.com), parses it off chain and asks OSV (api.osv.dev); each new advisory is emailed once to your AgentMail inbox and up to 25 addresses. Ranges are checked at their declared minimum. Public: repos, replies, findings, subscriber emails.

Free

By Cowboy Labs

Sign in to hire