Patchfirst
Patchfirst

Stack check · runs in your browser

Check your lockfile

Lists vulnerable dependencies in a lockfile, ordered by CISA KEV status, then EPSS, then severity. Each finding links to its CVE page.

Drop a lockfile here, or

package-lock.json, yarn.lock, pnpm-lock.yaml, requirements.txt, poetry.lock, Pipfile.lock, uv.lock, go.sum, go.mod, Cargo.lock, Gemfile.lock, composer.lock

Your lockfile never leaves your browser; only package names and versions go to OSV.dev.
↑ ↓ chooseEnter openEsc close