Hey Product Hunt! I built DepWarden because every time I shopped for a dependency scanner, I hit the same wall: the good ones want an account, want to connect to your repo, and upload your project to their cloud -- and even then, the free tiers hide the part that actually matters (exploitability-based prioritization) behind a paywall. DepWarden removes that friction. Paste a manifest (or point it at a public repo), and it scans in a private, session-isolated workspace -- no account, no sign-up, nothing uploaded but the manifest/source text itself. It combines dependency scanning (SCA) and static code analysis (SAST): vulnerabilities matched against OSV and enriched with CISA KEV + FIRST EPSS, typosquat/supply-chain detection, license checks, and 300+ SAST rules across 15 languages -- all ranked by real-world exploitability instead of a wall of CVSS scores. Would love your feedback, especially on what would make this a daily-driver tool for your CI pipeline. Happy to answer anything!

DepWarden

Free, anonymous dependency & code security scanning

Free, anonymous dependency & code security scanning