Developer
Server querySoftware Supply-Chain & OSV Scanner
Parse npm and pnpm manifests locally, review provenance and install risks, then query exact versions against OSV on demand.
Package manifest or lockfile
The file is parsed locally first. Only after you click the OSV check are the first 100 exact package names and versions sent to OSV; scripts and file content are not sent.
Supply-chain inventory
Analyze supply chain locally