DepWarden

DepWarden combines dependency scanning (SCA) and static code analysis (SAST) in one free, anonymous tool. Paste a manifest/lockfile/SBOM and/or source code -- no account, no sign-up, nothing uploaded but the manifest/source text itself. Get vulnerabilities (OSV + CISA KEV + FIRST EPSS), typosquat/supply-chain risk, license issues, and code-level security findings across 15 languages, ranked by real exploitability instead of a wall of CVSS scores.