Launched this week
Depheal
Offline Python CVE vulnerability scanner...
10 followers
Offline Python CVE vulnerability scanner...
10 followers
Depheal scans your Python projects for known CVE vulnerabilities instantly - no internet needed. Zero dependencies, pure local security scanning using AST analysis. Find critical bugs in seconds, fix them immediately. Built for developers who care about security but hate complexity. Open source, available on PyPI.
Ran it against an old flask project and it caught a requests CVE i had completely missed, all offline in under a second. The pure local approach is genuinely useful for air-gapped work.
really cool that this runs offline, that part is honestly super underrated. one thing i keep wondering though is whether you could add support for requirements.txt and pyproject.toml scanning too, since a lot of projects have transitive deps that the actual source code doesnt directly import but still pulls in vulnerable versions. would round out the tool nicely
The pure local AST analysis is a really thoughtful call, especially for devs handling sensitive code who can't just pipe everything to a cloud scanner. Love that it ships with zero dependencies too.
Love the offline-first approach, super practical for CI pipelines and air-gapped environments. One thing that would make this even more useful is auto-generating the minimal version bump or pin needed to resolve each flagged CVE, so devs can just copy-paste the fix into their requirements file instead of digging through advisories.
Honestly this is pretty cool, local scanning is a nice touch. One thing though, would be great if it could generate a diff or suggested fix for the vulnerable dependency versions right in the CLI output. Like instead of just telling me which package has a CVE, show me exactly what to bump it to. Would save a lot of lookup time honestly.