dependency.audit

Dependency audit scans identify known security flaws in npm, Python, and Rust packages by parsing manifest files and comparing against vulnerability databases. Run it before deployment or on a schedule to surface outdated or vulnerable packages across your project.

Yes, license compliance checks verify that all dependency licenses align with your project policies. The audit reports which packages may violate your licensing requirements, helping you manage supply chain risk.

Dependency audit generates actionable upgrade guidance for vulnerable or outdated packages, including target versions and risk assessments. Use these recommendations to patch security flaws and maintain current package versions.

Yes, dependency audit requires network access to registries to fetch vulnerability and license data. It parses your manifest files locally but connects to external sources to identify known security issues and compliance gaps.

Dependency audit is designed for CI/CD integration and on-demand scans. Run it as an audit-only check in your pipeline to automatically trigger security and license compliance reports before deployments.

Dependency audit consolidates security scanning across npm, Python, and Rust in a single workflow, producing unified security and compliance reports. This eliminates running multiple tools and enables consistent vulnerability assessment across polyglot projects.