Vulert

Your project pulls in hundreds of third-party dependencies, and a package that dropped a vulnerability yesterday leaves you in the dark today — until something breaks. Vulert watches exactly this: it reads your dependency manifest and matches it against newly disclosed CVEs, alerting you the moment there's a hit.

Features

Manifest Scan: Parses dependency files without reading your source.

CVE Matching: Maps dependency versions to known disclosed flaws.

Real-time Alerts: Notifies you the instant a relevant vuln appears.