Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

Check your Python environments for vulnerable Open Source packages with OSS Index or Sonatype Nexus Lifecycle.

Sonatype OSS Index - Maven Integrations

A .NET Core global tool to check the packages for known vulnerabilities

Sonatype OSS Index - Public

Monitors for new or updated dependencies and provides vulnerability information wihthin the editor

Python library for querying OSS Index

Implement vulnerabilities scanning on top of package management system like apt, pip, composer...

Generated API client for Sonatype OSS Index in Go

Audits nodejs dependencies for known vulnerabilities.