AuditXDoes this GitHub repo have known-vulnerable dependencies?
Paste a public GitHub repo. This reads its package.json or requirements.txt directly from GitHub and checks every dependency against OSV.dev — Google's open, real vulnerability database (the same data source npm audit and GitHub Dependabot draw from) — before you ever run npm install or pip install.
How this works
Your browser fetches package.json/requirements.txt directly from raw.githubusercontent.com, parses the dependency list, and sends it to OSV.dev's public batch query API. For every match, it fetches the real advisory (summary + severity) from OSV.dev's vulnerability API. Nothing about the repo you check is sent to AuditX's own server — this runs entirely client-side against GitHub and OSV.dev's public APIs.
This only checks direct dependencies listed in the manifest file, not your full resolved dependency tree (transitive dependencies) — for that, run npm audit or pip-audit locally against your actual lockfile.