Depna

What it does

Depna scans your dependency files for vulnerabilities in under 2 minutes. No repo access, no OAuth, no installs. Just upload package.json, requirements.txt, or any of 8 ecosystems. Every CVE is analyzed by AI in three layers: technical, business impact, and executive summary with CVSS prioritization and patch tips. Export audit-ready ISO 27001 & SOC 2 PDFs, white labeled with your logo. One line CI/CD integration + Slack/Teams/Discord alerts.

Depna is a dependency vulnerability scanner that works without repo or source code access. Upload package-lock.json, lockfiles, or manifests for audit-ready reports.

Upload a dependency file or lockfile and get a comprehensive vulnerability report in under 2 minutes — no source code access, no repo access, no OAuth, no install. Reports are audit-ready, aligned with ISO 27001 & SOC 2 Type II controls. Use Depna as a dependency scanner without source code access: it scans dependency files and lockfiles, not your repository. Upload package-lock.json, requirements.txt, pom.xml, go.mod, or another supported manifest and get vulnerability results without OAuth, Git app installs, or source-code permissions. Upload a dependency manifest or lockfile from nine package ecosystems. Depna extracts package names and versions, then checks them against vulnerability…from depna.io

• 
  Dependency CI – Continuous testing for your dependencies2016 · dependencyci.com · ▲198

  SonarQube provides advanced SAST, SCA & secrets detection to secure your SDLC. Scan 40+ languages for vulnerabilities. Start your free trial today.

• 
  EOL DatasetApr 2026 · herodevs.com · ▲64

  Find every EOL dependency in your stack. Free. In 5 minutes.

• 
  ScanReqJun 2026 · scanreq.com · ▲4

  Find outdated deps and CVEs across 8 ecosystems in VS Code

• 
  npm install actual-malware2022 · github.com · ▲55

  Our package registry ecosystem has a serious problem... and not just npm. People are aware of this but maybe this will make them a bit more aware

• 
  Packagr.app – a private package repository with security scanning2019 · packagr.app · ▲43

  Host private Python, Docker, NPM, Debian, and Conda packages. Private package registry with 4.5x faster installs, CVE scanning, and SSO. Up to 80% cheaper than Cloudsmith. Free tier available.

• 
  Veln — every package, verifiedMay 2026 · veln.sh · ▲17

  Block bad npm and pip packages. Before they download.

• 
  /dev/null▲484

  a social network for devs

  Dev tools · 3d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 28d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 26d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 23d ago · openbot.run

• 
  Talanoa▲346

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 21d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 28d ago · corespeed.io

• 
  Fundraisly▲1,537

  AI fundraising agent that finds investors and books meetings

  AI · Jun 2026 · fundraisly.com

• 
  Homebrew 6.0.0▲1,481

  Today, I’m proud to announce Homebrew 6.0.0. The most significant changes since 5.1.0 are a new tap trust security mechanism, the new faster, smaller, default internal Homebrew JSON API, sandboxing on Linux, better defaults informed by our user survey, many brew bundle improvements, improved performance and initial support for macOS 27 (Golden Gate). Happy to discuss any questions here!

  Dev tools · Jun 2026 · brew.sh

• 
  Performative-UI – A react component library of design tropes▲1,181

  Hi HN! I was super frustrated at apps like tiktok and wechat preventing me from saving or downloading the animated gifs, so I made a little tool to turn a screen recording into a slack-sized emoji. Hope you get some value from this!

  Life & fun · Jun 2026 · vorpus.github.io

• 
  Upstream▲976

  The inbox designed for humans and agents

  AI · Jun 2026 · upstream.do

• 
  Goldfish▲958

  Press Option. It knows your work and replies like you

  AI · Jun 2026 · goldfish.sh

• 
  I made Google Trends for Hacker News by indexing 18 years of comments▲822

  Search 18 years of Hacker News and chart how any topic, tool, or person trended. Overlay terms to compare their rise and fall across 45M posts and comments.

  Life & fun · Jun 2026 · hackernewstrends.com