Tool to check for dependency confusion vulnerabilities in multiple package management systems
Appears on
Quick read
Latest capture 2026-10-18 09:45
Archive status reflects the last catalog sync, not a maintenance assessment. Check recent releases, issue responses, and fit for your project with the repository shortlisting checklist.
0 paths
Agent instructions and tool configuration found in this repository.
No config files detected.
1 observed capture since 2026-10-18. Observed captures are shown by default.
Stars from first capture 0
Observed captures only
All tracked data
Observed snapshots
Observed snapshots
Nearest indexed repositories by embedding similarity.
Mitigate security concerns of Dependency Confusion supply chain security risks
Small tool to inform you about potential risks in project dependencies list
An extensible, heuristic-based vulnerability scanning tool for installed npm packages
Detect Glassworm & trojan source attacks that employ unicode bidi attacks to inject malicious code
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.
DepScope — Package Intelligence for AI Agents. 22 MCP tools, 19 ecosystems, free, no auth. https://depscope.dev
