deps.sh

Supply chain risk scoring as a service. GitHub · LinkedIn

curl -L deps.sh/npm/lodash          # npm package
curl -L deps.sh/pip/requests        # PyPI package
curl -L deps.sh/cargo/serde         # crates.io package
curl -L deps.sh/lodash              # defaults to npm
curl -L deps.sh/recent              # high-risk packages (last scan)
curl -L deps.sh/feed                # security advisories
curl -L deps.sh/incidents           # supply chain incidents
curl -L deps.sh/transfers           # ownership transfers
curl -L -X POST deps.sh/scan -d @package-lock.json  # lockfile scan
curl -L deps.sh/npm/lodash?json     # JSON output

Recent Advisories (25m ago)

Supply Chain Incidents (25m ago)