DepWarden

What it does

DepWarden combines dependency scanning (SCA) and static code analysis (SAST) in one free, anonymous tool. Paste a manifest/lockfile/SBOM and/or source code -- no account, no sign-up, nothing uploaded but the manifest/source text itself. Get vulnerabilities (OSV + CISA KEV + FIRST EPSS), typosquat/supply-chain risk, license issues, and code-level security findings across 15 languages, ranked by real exploitability instead of a wall of CVSS scores.

Free, anonymous SCA: scan dependencies for CVEs (OSV, CISA KEV, EPSS), typosquats, risky licenses and end-of-life packages. No account, no source upload.

DepWarden is a free, anonymous software composition analysis (SCA) tool. Paste a manifest or drop a lockfile and it scans every dependency against live OSV, CISA KEV and FIRST EPSS data, catches typosquats and dependency-confusion attacks, flags risky licenses, deprecated and end-of-life packages, then ranks everything by real-world exploitability and hands you a one-command fix. No account, and we never receive your source code or binaries — only the dependency manifest text you paste. A typical project has hundreds of advisories but only a handful that attackers can actually reach. DepWarden combines CISA KEV, FIRST EPSS, fix availability and dependency depth into a "Fix these first"…from depwarden.in

• 
  Dependency CI – Continuous testing for your dependencies2016 · dependencyci.com · ▲198

  SonarQube provides advanced SAST, SCA & secrets detection to secure your SDLC. Scan 40+ languages for vulnerabilities. Start your free trial today.

• BO
  Bearer – Open-source code security scanning solution (SAST)2023 · ▲106

  Hi HN, we’re the co-founders of Bearer, and today we launch an open-source alternative to code security solutions such as Snyk Code, SonarQube, or Checkmarx. Essentially, we help security & engineering teams to discover, filter and prioritize security risks and vulnerabilities in their codebase, with a unique approach through sensitive data (PII, PD, PHI). Our website is at https://www.bearer.com and our GitHub is here: https://github.com/bearer/bearer We are not originally Security experts but have been software developers and engineering leaders for over 15…

• 
  Visualize the entropy of a codebase with a 3D force-directed graph2024 · github.com · ▲180

  Hi HN! I'm Gabriel, the author of dep-tree (https://github.com/gabotechs/dep-tree), and I wanted to show off this tool and explain why it's being really useful at my current org for dealing with code complexity. I work at a startup where business evolves really fast, and requirements change frequently, so it's easy to end up with big piles of code stacked together without a clear structure, specially with tight deadlines. I made dep-tree [1] to help us maintain a clean code architecture and a logical separation of concerns between parts of the application, which is…

• 
  EOL DatasetApr 2026 · herodevs.com · ▲64

  Find every EOL dependency in your stack. Free. In 5 minutes.

• 
  Packagr.app – a private package repository with security scanning2019 · packagr.app · ▲43

  Host private Python, Docker, NPM, Debian, and Conda packages. Private package registry with 4.5x faster installs, CVE scanning, and SSO. Up to 80% cheaper than Cloudsmith. Free tier available.

• 
  FOSSA – Effortlessly track and comply with open source licenses2017 · fossa.io · ▲26

  FOSSA secures the software supply chain with automated SBOM generation, software composition analysis, license compliance, and vulnerability management.

• 
  /dev/null▲482

  a social network for devs

  Dev tools · 2d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 27d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 25d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 22d ago · openbot.run

• 
  Talanoa▲343

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 20d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 28d ago · corespeed.io

• TL
  The load-bearing vocabulary of Claude▲710

  Life & fun · Aug 2026 · louisabraham.github.io

• 
  Hey Noah▲656

  A proactive AI executive assistant for founders

  AI · Aug 2026 · heynoah.io

• 
  Clipto MCP▲655

  Hey HN, We recently built Clipto. It’s a tool that lets you search over terabytes of video, audio, and images on your computer, without relying on the cloud. Motivation: we probably all had this similar experience, we know a moment exists in a video or audio, but finding it takes hours scrubbing the timeline. You can send all the media to process in the cloud, but it’s slow, expensive and raises privacy concerns. So we decided to build our own on-device media search engine. How it works (high level): 1. We ingest video, audio, image; normalize formats via ffmpeg; run content analysis to…

  Work · Aug 2026 · clipto.com

• 
  Simple algorithm and color space to generate diverse skin tones▲627

  Hello HN! I found that picking out plausible but diverse skin tones for my digital art and game development projects was kind of difficult, and I got curious about if there was a way to define a color space that made it easy. I've built a color picker and procedural generation algorithm based on the space as well as a bunch of other fun js features and demos throughout the page that use the equations. If you find it interesting, I have lots of explanations of how I built it and what properties the space has. The methodology might be a bit shaky, but hopefully the result is as helpful for…

  Life & fun · Aug 2026 · toneyalexander.github.io

• 
  AdAnt AI▲620

  Claude for viral, high-converting social ads

  AI · Aug 2026 · adant.ai

• 
  Astute▲606

  Automate your B2B brand going viral, with new media creators

  AI · Aug 2026 · company-app.joinastute.com