trawld - catch vulnerable dependencies before they catch you

most dependency scanners run in CI. trawld runs on the machine. install the agent once globally and it watches every project you have, npm and pip, cross-references against the OSV database, and streams findings to a live dashboard across all your machines. no config, no pipeline setup. it also queues remediation commands through the agent's heartbeat loop so fixes reach machines without needing persistent server connections. built for developers who vibe-code fast and forget to audit.