Python Supply Chain Risk Scanner

Scan your Python dependencies for security risks using free APIs. No API key required.

What It Checks

• Package exists on PyPI
• Has homepage/repository link
• Has enough releases (not brand new)
• Has description and author info
• Was updated recently (not abandoned)

Usage

pip install requests

# Scan a requirements.txt
python scanner.py requirements.txt

# Check a single package
python scanner.py
> Package name: requests

Output

  !!! obscure-utils           HIGH     Only 1 releases, No author info
  [!] old-library             MEDIUM   Last release 890d ago
  [ok] requests               LOW
  [ok] flask                  LOW

1 HIGH, 1 MEDIUM, 2 LOW

Related Projects

• GitHub Portfolio Analyzer — Analyze GitHub profiles
• npm Health Check — Audit npm packages
• Free APIs Collection — 50+ free APIs

Author

Built by Aleksej Spinov. Writing inquiries: Spinov001@gmail.com

License

MIT