Your lockfile.
The context you need.

Start with what you ship.
Find known vulnerabilities in your dependencies.

Check exact versions against OSV. Get a report you can share and a feed for your stack.

We delete your lockfile after parsing and send package names and versions to OSV for checks. Anyone with the report link can view findings. Reports expire after 30 days. How we handle your data