Pricing

from $30.00 / 1,000 vulnerability results

Go to Apify Store

OSV Package Vulnerability Scanner

Try for free

Find vulnerabilities for npm, PyPI, Maven, Go, NuGet, RubyGems, and crates.io packages.

Pricing

from $30.00 / 1,000 vulnerability results

Rating

0.0

(0)

Developer

Technical Dost Solutions

Actor stats

Bookmarked

Total users

Monthly active users

18 days ago

Last modified

Why this can sell

Exact Store gap checked: OSV package searches showed near-zero direct supply.
Buyer intent is commercial: compliance, security, legal, regulatory, or competitive-intelligence workflows.
The Actor uses stable public APIs or official public feeds, so it can run on schedules without expensive browser proxy overhead.

Input

Run with the defaults for a sample dataset. Narrow the query fields for production monitoring.

Output

The default dataset contains normalized records with these fields:

packageName
ecosystem
version
vulnerabilityId
summary
severity
fixedVersions
publishedAt
modifiedAt
sourceUrl

Monetization

Best fit: pay per vulnerability row or low monthly subscription for scheduled monitoring.

Notes

This Actor is designed as a reliable data product, not a brittle webpage scraper. Always validate regulated or legal data against the linked source before making business decisions.

OSV Package Vulnerability Monitor

orbiscribe/osv-package-vulnerability-monitor

Monitor package vulnerability records from OSV.dev for npm, PyPI, Go, Maven, crates.io, RubyGems, and SBOM-derived package lists.

Orbiscribe Labs

OSV Open Source Vulnerabilities Scraper

parseforge/osv-vulnerabilities-scraper

Query the OSV.dev open-source vulnerabilities database. Search by package (PyPI/npm/Go/Maven/RubyGems/crates.io/NuGet/Packagist), commit hash, or fetch a specific vulnerability by ID. Returns affected ranges, CVE aliases, severity, and references.

ParseForge

OSV.dev Vulnerabilities Scraper

crawlerbros/osv-vulnerabilities-scraper

Scrape OSV.dev, Google's open vulnerability database covering NPM, PyPI, Go, Maven, NuGet, Cargo, RubyGems, GitHub Actions, OS distros, and more. Look up vulnerabilities by package, fetch a specific OSV/GHSA/CVE record, or batch-query an entire dependency tree.

Crawler Bros

Open Source Vulnerability Scraper (OSV.dev)

chrisp1211/vulnerability-scraper-max

Look up open-source security vulnerabilities from OSV.dev for any package across npm, PyPI, Go, Maven, crates and more. Returns CVE IDs, severity, summary and references. No API key. Pay per vulnerability; empty runs free.

Christian Pichichero

Open Source Dependency Vulnerability Scanner

scrapemint/dependency-vulnerability-scanner

Scan dependencies against the OSV.dev database. Supply packages as ecosystem:name@version (npm, PyPI, Go, Maven, crates.io and more); get one row per known vulnerability with OSV/GHSA id, CVE aliases, severity, affected range, and the fix version. Dedupe mode gives a new-vulnerability feed.

Ken M

5.0

Package Intel: npm + PyPI Metadata & Vulnerability Scraper

studious_allergy_mig/package-intel-scraper

Normalized npm and PyPI package metadata plus OSV.dev vulnerability signals for dependency auditing and supply-chain monitoring.

Conor G

Package Registry Scraper — npm, PyPI, crates

ponderable_hydrometer/package-registry-scraper

Package intelligence across npm, PyPI & crates.io — version, license, repo, dependencies & monthly downloads. Search or look up by name. Free keyless APIs.

Ponderable Hydrometer

Malicious Package Supply Chain Tracker Scraper

jungle_synthesizer/malicious-package-supply-chain-tracker-scraper

Cross-ecosystem feed of confirmed malicious/typosquatted packages across npm, PyPI, crates.io, Go, Maven, NuGet, Packagist and RubyGems, sourced from the OSSF malicious-packages dataset (also feeds OSV.dev). Category taxonomy plus typosquat-target linkage for CI gating. Passive read only.

BowTiedRaccoon

NPM & PyPI CVE Monitor

conceivable_extension/npm-cve-monitor

Checks npm and PyPI packages against the OSV vulnerability database and npm registry. Detects CVEs, suspicious maintainer patterns, and supply chain risks. Paste your package.json or requirements.txt. £0.001 per package checked.

joseph fadero

Dependency Audit — CVE, License & EOL Check for AI

haketa/dependency-audit

Audit any software dependency for vulnerabilities (CVE), license, deprecation, end-of-life and health scores in one call. Supports npm, PyPI, crates, Go, Maven, NuGet, RubyGems. Supply-chain security grounding for AI coding agents & SCA.