Is anything in my repo vulnerable, end of life or deprecated today? Public repos get a shareable report and a README badge.
No sign-up
Free tools for checking and planning your stack
Check dependencies, versions and base images against today’s vulnerability and end-of-life data, plan a stack for an idea, or map a repo you already have. 17 of these 20 tools give you an answer without an account; the rest say what they need.
Check your dependencies
Live vulnerability, end-of-life and registry data for the files you already have. No AI, nothing to install.
Which of my npm packages have known vulnerabilities, and which version fixes them?
No sign-up
Are the Python packages I pinned affected by known vulnerabilities?
No sign-up
Do my Poetry or uv dependencies have open security advisories?
No sign-up
Is my base image end of life, unpinned or behind a supported release?
No sign-up
Do the Go modules I depend on have known vulnerabilities?
No sign-up
Are any of my Rust crates affected by a known advisory?
No sign-up
Check a framework or runtime version
Type a version and see its open advisories, whether attackers use them, and the release that fixes them.
Is my Next.js version vulnerable, and which release fixes it?
No sign-up
Is my React version affected by a known vulnerability?
No sign-up
Is my Node.js version still supported and safe to run?
No sign-up
Does my Django version have open security advisories?
No sign-up
Is this runtime, framework or base image still supported, and until when?
No sign-up
Is my project affected by the latest big vulnerability or compromised package?
No sign-up
Plan and map a stack
Design a stack for an idea, draw the one a repo already runs on, and see what it needs before launch.
What should I build my idea on, given my budget, scale and compliance needs?
Free account
What does this repo actually run on, and how do the parts connect?
Connect GitHub
What do I need to lock down before I launch an app I built with AI?
No sign-up
What does each part of my stack need before it goes to production?
No sign-up
Look something up
Dated facts with their sources, for questions your coding agent can’t answer from its training data.
When does my coding agent’s knowledge stop, and what has changed since?
No sign-up
Is this npm or PyPI package version safe to install, and what replaces it if not?
No sign-up
Use it from your coding agent
The same checks, called by Claude Code, Cursor or Codex while they work.
How do I give Claude Code, Cursor or Codex live stack data while they build?
Free account