📦 Dependency Auditor

$9.99

Audit your Python dependencies for CVEs (via PyPI advisory database), version staleness, and license compatibility issues. Parses requirements.txt, pyproject.toml, and Pipfile. CI-friendly with exit codes and SARIF output.

• CVE lookup via PyPI JSON advisory feed (no API key needed)
• Outdated version detection with latest-version comparison
• License compatibility check against an allowlist
• SARIF output for GitHub Security tab integration
• requirements.txt, pyproject.toml, and Pipfile support
• Transitive dependency scanning (resolves full dep tree)
• CI mode: exit 1 on any CRITICAL or HIGH CVE

# Audit requirements.txt
python audit_deps.py --file requirements.txt

# Full audit with SARIF output
python audit_deps.py --file pyproject.toml --output sarif --out report.sarif

# CI mode — fail on HIGH+ CVEs
python audit_deps.py --file requirements.txt --ci --min-severity HIGH

Related tools