audit

Scan your dependencies for known vulnerabilities.

Checks your project's dependencies against the OSV.dev vulnerability database — npm, crates.io, Go, PyPI and Packagist — and tells you what to fix. Findings are ranked by whether they can actually hurt you: production dependencies keep full severity, dev-only tools are downgraded, and deep transitive noise is grouped so the report stays readable. One repo, or every repo you have.