Dependency Scanning Python Packages

vulnfeed-mcp

Dependency vulnerability monitoring MCP server — knows your lockfile, prioritizes by EPSS, recommends fix versions.

forensic-scan

Forensic AST scanner that detects deliberate obfuscation, hidden logic and payloads smuggled in non-code files

vulngate

Agent-neutral security checks before you ship — SAST, secrets, and dependency audit as a merge gate. Find, understand, and fix vulnerabilities in AI- or human-written code. BYO-inference, $0, MIT.

venvy

Offline, machine-wide Python supply-chain security audit - scan every virtual environment for vulnerable & malicious packages. CVE + typosquat detection, agent/CI-ready JSON. Also a lightweight venv manager.

sigilsec

Automated security auditing CLI for AI agent code — quarantine-first workflow for repos, packages, and agent tooling

pkg-defender

Stop supply chain attacks before they reach your machine or CI pipeline.