Dependency Analysis Python Packages

modulegraph2

Modulegraph2 is a library for creating and introspecting the dependency graph between Python modules.

pyscn

Code quality analysis for Python in the age of AI coding.

enola-cli

Understand, analyze, and govern software systems across repositories, languages, and technologies.

dependency-check

:closed_lock_with_key: Shim to easily install OWASP dependency-check-cli into Python projects

owasp-depscan

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

copulae

Multivariate data modelling with Copulas in Python

ds-analysis-lib

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

ds-xbom-lib

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

ds-reporting-lib

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

pyscn-mcp

Code quality analysis for Python in the age of AI coding.

embtrace-sbom

Open-source SBOM generator for embedded builds — CMake, Yocto, Buildroot, Zephyr. GPL, fully local by default. Optional: free EU CRA readiness report.

ochrona

A command line tool for detecting vulnerabilities in Python dependencies and doing safe package installs

appthreat-depscan

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

jochwacht-sbom

Open-source SBOM generator for embedded builds — CMake, Yocto, Buildroot, Zephyr. GPL, fully local by default. Optional: free EU CRA readiness report.

appthreat-chen

Code Hierarchy Exploration Net (chen)

embtrace-check

Open-source SBOM generator for embedded builds — CMake, Yocto, Buildroot, Zephyr. GPL, fully local by default. Optional: free EU CRA readiness report.

lambda-watcher

Turn a folder of downloaded AWS Lambda zips into a versioned, diffable history — readable diffs of code, dependencies, env vars, IAM impact and secrets. Runs locally, makes no AWS API calls.

pcresolve

PCResolve: Project-level Python static analysis for API ownership and library usage provenance

blast-search

Blast radius and provenance for a codebase - what breaks if I change this symbol, and where a pasted snippet came from, read from the bytes on disk right now. No precomputed graph.

maven-decoder-mcp

MCP server for inspecting, searching, and decompiling Maven .m2 JARs for Java AI coding agents.

ossiq

OSS IQ uses MSR-driven analysis tool to track versions lag and dependencies health at scale. Move from reactive CVE-chasing to a planned, predictable maintenance rhythm.

kospex

Know your code and know your developers: git analytics, code ownership, key person risk, dependency and supply chain freshness, and tech landscape — from a CLI and local web UI.

gonzalgo

Axiom provenance for Lean 4 and Metamath — which step introduced an axiom, and whether the theorem statement required it Website: https://f-keys.com/gonzalgo/

hookfix

Find the hidden imports that break frozen Python apps. Runtime import tracing, not a static scan. Emits PyInstaller hidden-import config.