An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

npmjs.org "security-tools" keyword

@mdn/mdn-http-observatory 1.7.1
The MDN HTTP Observatory is a set of tools to analyze your website and inform you if you are util...
27 versions - Latest release: about 1 month ago - 8.57 thousand downloads last month - 142 stars on GitHub - 2 maintainers
Top 2.9% on npmjs.org
@escape.tech/graphql-armor-max-depth 2.4.2
Limit the depth allowed in a GraphQL query.
27 versions - Latest release: about 1 year ago - 3 dependent packages - 230 dependent repositories - 1.51 million downloads last month - 588 stars on GitHub - 5 maintainers
secret-hunter 1.0.9
A powerful CLI tool to scan your codebase for exposed API keys, secrets, and sensitive information
10 versions - Latest release: about 1 year ago - 16 downloads last month - 3 stars on GitHub - 1 maintainer
atp-profiles 1.0.1
Built-in ATP security profiles and profile schema for Agent Trust Protocol
1 version - Latest release: 6 months ago - 10 downloads last month - 3 stars on GitHub - 1 maintainer
@dotenvx/dotenvx-linux-arm64 2.33.0
dotenvx-linux-arm64 binary
262 versions - Latest release: about 15 hours ago - 2.62 thousand downloads last month - 5,828 stars on GitHub - 2 maintainers
@dotenvx/next-env 2.2.4
dotenvx drop-in replacement for @next/env
15 versions - Latest release: about 16 hours ago - 3.04 thousand downloads last month - 5,828 stars on GitHub - 2 maintainers
@dotenvx/dotenvx-darwin-x86_64 2.33.0
dotenvx-darwin-x86_64 binary
264 versions - Latest release: about 15 hours ago - 4.62 thousand downloads last month - 5,828 stars on GitHub - 2 maintainers
@dotenvx/dotenvx-linux-x86_64 2.33.0
dotenvx-linux-x86_64 binary
262 versions - Latest release: about 15 hours ago - 100 thousand downloads last month - 5,828 stars on GitHub - 2 maintainers
@dotenvx/dotenvx-darwin-arm64 2.33.0
dotenvx-darwin-arm64 binary
267 versions - Latest release: about 15 hours ago - 3.12 thousand downloads last month - 5,828 stars on GitHub - 2 maintainers
@dotenvx/dotenvx-windows-amd64 2.33.0
dotenvx-windows-amd64 binary
262 versions - Latest release: about 15 hours ago - 4.16 thousand downloads last month - 5,828 stars on GitHub - 2 maintainers
@dotenvx/dotenvx-linux-amd64 2.33.0
dotenvx-linux-amd64 binary
263 versions - Latest release: about 15 hours ago - 4.16 thousand downloads last month - 5,828 stars on GitHub - 2 maintainers
@dotenvx/dotenvx-windows-x86_64 2.33.0
dotenvx-windows-x86_64 binary
262 versions - Latest release: about 15 hours ago - 3.09 thousand downloads last month - 5,828 stars on GitHub - 2 maintainers
@dotenvx/dotenvx-darwin-amd64 2.33.0
dotenvx-darwin-amd64 binary
265 versions - Latest release: about 15 hours ago - 4.35 thousand downloads last month - 5,828 stars on GitHub - 2 maintainers
@dotenvx/primitives 3.1.0
a secure dotenv–from the creator of `dotenv`
41 versions - Latest release: about 17 hours ago - 25.8 million downloads last month - 5,828 stars on GitHub - 2 maintainers
@dotenvx/dotenvx-linux-armv7l 2.33.0
dotenvx-linux-armv7l binary
155 versions - Latest release: about 15 hours ago - 3.11 thousand downloads last month - 5,828 stars on GitHub - 2 maintainers
@dotenvx/dotenvx 2.32.4 πŸ’°
a secure dotenv–from the creator of `dotenv`
358 versions - Latest release: 5 days ago - 55 million downloads last month - 5,828 stars on GitHub - 2 maintainers
@dotenvx/dotenvx-linux-aarch64 2.33.0
dotenvx-linux-aarch64 binary
263 versions - Latest release: about 15 hours ago - 4.29 thousand downloads last month - 5,828 stars on GitHub - 2 maintainers
@s-gw/s-gw 0.1.22
Local credential control for AI coding agents.
22 versions - Latest release: about 4 hours ago - 2.91 thousand downloads last month - 15 stars on GitHub - 1 maintainer
@monizb/open-redirect-firewall 1.0.3
A security package that prevents open redirect vulnerabilities by whitelisting allowed domains
4 versions - Latest release: about 1 year ago - 37 downloads last month - 0 stars on GitHub - 1 maintainer
@keygraph/shannon 3.4.0
Shannon is an autonomous white-box AI pentester for web applications and APIs, by Keygraph.
34 versions - Latest release: about 4 hours ago - 5.3 thousand downloads last month - 48,493 stars on GitHub - 1 maintainer
atp-sdk 2.1.0
Official TypeScript SDK for Agent Trust Protocolβ„’ - Build secure, verifiable, and trustworthy app...
10 versions - Latest release: 6 days ago - 401 downloads last month - 3 stars on GitHub - 1 maintainer
@crashappsec/serverless-dust 0.0.1
Dust Serverless Framework plugin
2 versions - Latest release: 11 months ago - 17 downloads last month - 438 stars on GitHub - 2 maintainers
create-atp-agent 1.3.2
Create Agent Trust Protocol agents
6 versions - Latest release: 6 days ago - 32 downloads last month - 3 stars on GitHub - 1 maintainer
@paradoxinfinite/dotenv 1.0.0 πŸ’°
Loads environment variables from .env file, with dotenv-safe features too.
1 version - Latest release: over 3 years ago - 33 downloads last month - 20,544 stars on GitHub - 1 maintainer
@ladjs/dotenv 4.0.2 πŸ’°
Loads environment variables from .env file
1 version - Latest release: about 9 years ago - 2 dependent packages - 1 dependent repositories - 37 downloads last month - 20,544 stars on GitHub - 5 maintainers
@vssuser1/dotenv 10.0.0-vss.dotenv.0 πŸ’°
Loads environment variables from .env file
1 version - Latest release: 6 months ago - 17 downloads last month - 20,544 stars on GitHub - 1 maintainer
dotenvx-hat 17.2.11 πŸ’°
Loads environment variables from .env file
3 versions - Latest release: 12 months ago - 25 downloads last month - 20,544 stars on GitHub - 1 maintainer
@turning/dotenv 17.4.2 πŸ’°
Loads environment variables from .env file
1 version - Latest release: 2 months ago - 18 downloads last month - 20,544 stars on GitHub - 1 maintainer
@frontsideair/dotenv 8.2.0 πŸ’°
Loads environment variables from .env file
1 version - Latest release: almost 7 years ago - 1 dependent package - 27 downloads last month - 20,544 stars on GitHub - 1 maintainer
@mrgibson/dotenv-buffer 17.2.4-beta1 πŸ’°
Loads environment variables into buffer
2 versions - Latest release: 10 months ago - 8 downloads last month - 20,544 stars on GitHub - 1 maintainer
@depup/dotenv 18.0.5-depup.0 πŸ’°
Loads environment variables from .env file (with updated dependencies)
12 versions - Latest release: 6 days ago - 990 downloads last month - 20,544 stars on GitHub - 1 maintainer
@morgs32/dotenvnow 4.0.6 πŸ’°
Loads environment variables from .env file
3 versions - Latest release: almost 9 years ago - 1 dependent package - 1 dependent repositories - 27 downloads last month - 20,544 stars on GitHub - 1 maintainer
orangedenv 1.1.1 πŸ’°
Loads environment variables from .env file
3 versions - Latest release: over 5 years ago - 1 dependent package - 63 downloads last month - 20,544 stars on GitHub - 1 maintainer
autobits-dotenv 8.2.0 πŸ’°
Loads environment variables from .env file
1 version - Latest release: almost 6 years ago - 2 dependent packages - 21 downloads last month - 20,544 stars on GitHub - 1 maintainer
Top 0.3% on npmjs.org
dotenv 18.0.5 πŸ’°
Loads environment variables from .env file
110 versions - Latest release: 6 days ago - 42,583 dependent packages - 1,228,719 dependent repositories - 738 million downloads last month - 20,544 stars on GitHub - 3 maintainers
@morgs32/dotenv 4.0.0 deprecated πŸ’°
Loads environment variables from .env file
1 version - Latest release: about 9 years ago - 1 dependent package - 1 dependent repositories - 11 downloads last month - 20,544 stars on GitHub - 1 maintainer
@morgs32/nowdotenv 4.0.3 πŸ’°
Loads environment variables from .env file
4 versions - Latest release: about 9 years ago - 1 dependent package - 1 dependent repositories - 27 downloads last month - 20,544 stars on GitHub - 1 maintainer
environment-noui5 1.1.0 πŸ’°
Loads environment variables from .env file
1 version - Latest release: about 3 years ago - 9 downloads last month - 20,544 stars on GitHub - 1 maintainer
secretsentry 1.0.1
A tool for finding leaked secrets in the code
2 versions - Latest release: over 1 year ago - 8 downloads last month - 2 stars on GitHub - 1 maintainer
typegraphql-prisma-graphql-query-purifier 1.4.0
A small library to match .gql queries vs user input. Removes fields from user requests that are n...
1 version - Latest release: about 1 year ago - 10 downloads last month - 1 stars on GitHub - 1 maintainer
@clawdstrike/adapter-core 0.2.7
Framework-agnostic adapter interfaces for Clawdstrike
11 versions - Latest release: 7 months ago - 83 downloads last month - 294 stars on GitHub - 1 maintainer
@clawdstrike/broker-client 0.2.7
Capability issuance and execute client for the Clawdstrike secret broker
2 versions - Latest release: 7 months ago - 45 downloads last month - 294 stars on GitHub - 1 maintainer
@clawdstrike/vercel-ai 0.2.7
Minimal Clawdstrike tool wrappers for the Vercel AI SDK
11 versions - Latest release: 7 months ago - 134 downloads last month - 294 stars on GitHub - 1 maintainer
clawdstrike 0.2.7
Official Clawdstrike TypeScript SDK
9 versions - Latest release: 7 months ago - 27 downloads last month - 294 stars on GitHub - 1 maintainer
@clawdstrike/policy 0.2.7
Canonical policy loader and engine (async guards + threat intel)
11 versions - Latest release: 7 months ago - 76 downloads last month - 294 stars on GitHub - 1 maintainer
@clawdstrike/codex 0.1.1
In-process tool boundary hooks for Codex-style coding assistants
2 versions - Latest release: 8 months ago - 39 downloads last month - 294 stars on GitHub - 1 maintainer
@clawdstrike/engine-local 0.2.7
Policy engine adapter that shells out to hush policy eval
11 versions - Latest release: 7 months ago - 69 downloads last month - 294 stars on GitHub - 1 maintainer
@clawdstrike/openai 0.2.7
In-process tool boundary hooks for the OpenAI Agents SDK
9 versions - Latest release: 7 months ago - 65 downloads last month - 294 stars on GitHub - 1 maintainer
@clawdstrike/openclaw 0.2.7
Clawdstrike security plugin for OpenClaw
11 versions - Latest release: 7 months ago - 69 downloads last month - 294 stars on GitHub - 1 maintainer
@clawdstrike/hunt 0.2.7
Hunt query, timeline, and local file loading for Clawdstrike
2 versions - Latest release: 7 months ago - 41 downloads last month - 294 stars on GitHub - 1 maintainer
@clawdstrike/langchain 0.2.7
Minimal Clawdstrike tool wrappers for LangChain tools
11 versions - Latest release: 7 months ago - 302 downloads last month - 294 stars on GitHub - 1 maintainer
@clawdstrike/claude-code 0.1.1
In-process tool boundary hooks for Claude Code-style assistants
2 versions - Latest release: 8 months ago - 43 downloads last month - 294 stars on GitHub - 1 maintainer
@clawdstrike/opencode 0.2.7
In-process tool boundary hooks for OpenCode-style coding assistants
11 versions - Latest release: 7 months ago - 63 downloads last month - 294 stars on GitHub - 1 maintainer
@clawdstrike/claude 0.2.7
In-process tool boundary hooks for Claude Code and the Claude Agent SDK
9 versions - Latest release: 7 months ago - 62 downloads last month - 294 stars on GitHub - 1 maintainer
@clawdstrike/origin-core 0.2.7
Trust adapter framework for origin-aware security enforcement
2 versions - Latest release: 7 months ago - 38 downloads last month - 294 stars on GitHub - 1 maintainer
@clawdstrike/engine-remote 0.2.7
Policy engine adapter that calls hushd /api/v1/eval
11 versions - Latest release: 7 months ago - 78 downloads last month - 294 stars on GitHub - 1 maintainer
@clawdstrike/wasm 0.2.7
WebAssembly bindings for clawdstrike cryptographic verification
11 versions - Latest release: 7 months ago - 69 downloads last month - 294 stars on GitHub - 1 maintainer
@clawdstrike/sdk 0.2.7
TypeScript SDK for clawdstrike security verification
11 versions - Latest release: 7 months ago - 103 downloads last month - 294 stars on GitHub - 1 maintainer
@clawdstrike/engine-adaptive 0.2.7
Adaptive policy engine with automatic mode switching between local and remote engines
2 versions - Latest release: 7 months ago - 40 downloads last month - 294 stars on GitHub - 1 maintainer
dnsweeper 1.0.0
Advanced CLI tool for DNS record risk analysis and cleanup. Features CSV import for Cloudflare/Ro...
1 version - Latest release: about 1 year ago - 19 downloads last month - 1 maintainer
northcheck 0.0.3
CLI tool to check links and files for potential threats using NordVPN APIs.
3 versions - Latest release: about 1 year ago - 2 downloads last month - 0 stars on GitHub - 1 maintainer
vulncheck-sdk 0.1.3
A comprehensive TypeScript/JavaScript SDK for the VulnCheck API - vulnerability intelligence plat...
2 versions - Latest release: about 1 year ago - 25 downloads last month - 1 maintainer
@nuwa-x/nuwault-core 1.0.0 deprecated
Advanced password generation library with character diversity optimization, repetition control, a...
1 version - Latest release: over 1 year ago - 13 downloads last month - 1 stars on GitHub - 1 maintainer
@mobb.ai/cli-macos-x64 1.5.17
Automated secure code remediation tool β€” standalone macos-x64 binary, no Node.js required.
16 versions - Latest release: about 1 month ago - 2.18 thousand downloads last month - 68 stars on GitHub - 3 maintainers
@aipermission/mcp 0.2.65
Local-only MCP bridge for the aipermission gateway.
72 versions - Latest release: about 17 hours ago - 3.6 thousand downloads last month - 19 stars on GitHub - 1 maintainer
@b12k/gitleaks 8.30.1-v.56
The missing NPM wrapper for Gitleaks
57 versions - Latest release: about 17 hours ago - 8.68 thousand downloads last month - 0 stars on GitHub - 1 maintainer
pastoralist 1.13.8 πŸ’°
Audit, secure, and clean up package manager overrides for npm, pnpm, Yarn, and Bun.
117 versions - Latest release: about 18 hours ago - 1 dependent package - 2 dependent repositories - 4.47 thousand downloads last month - 108 stars on GitHub - 1 maintainer
kxco-pq-scan 1.1.2
Find quantum-vulnerable cryptography in a JavaScript dependency tree. Separates what Shor's algor...
4 versions - Latest release: 26 days ago - 429 downloads last month - 0 stars on GitHub - 1 maintainer
uzp-cli 1.2.0
User's Zecure Pocket - A secure CLI tool for managing secrets
10 versions - Latest release: 6 months ago - 14 downloads last month - 0 stars on GitHub - 1 maintainer
@asymptote/sdk 0.1.0
Asymptote TypeScript SDK for Observe agent telemetry
1 version - Latest release: 4 months ago - 68 downloads last month - 1,766 stars on GitHub - 1 maintainer
fortify-schema 2.2.1 πŸ’°
A modern TypeScript validation library designed around familiar interface syntax and powerful con...
47 versions - Latest release: 10 months ago - 518 downloads last month - 6 stars on GitHub - 1 maintainer
@profullstack/scanner 1.1.2
A comprehensive CLI and Node.js module for web application security scanning with OWASP complianc...
4 versions - Latest release: over 1 year ago - 30 downloads last month - 0 stars on GitHub - 2 maintainers
sql-query-safety-checker 1.1.9 πŸ’°
πŸ›‘οΈ Comprehensive TypeScript library for SQL query security analysis with injection detection, ris...
11 versions - Latest release: over 1 year ago - 14 downloads last month - 0 stars on GitHub - 1 maintainer
Top 2.9% on npmjs.org
@escape.tech/graphql-armor-cost-limit 2.4.3
Limit the cost of a GraphQL Query.
24 versions - Latest release: over 1 year ago - 3 dependent packages - 222 dependent repositories - 1.31 million downloads last month - 588 stars on GitHub - 5 maintainers
guardscan 1.0.5 πŸ’°
GuardScan - Privacy-first AI Code Review CLI with comprehensive security scanning
6 versions - Latest release: 10 months ago - 44 downloads last month - 15 stars on GitHub - 1 maintainer
@node9/policy-engine 2.27.0
Shared policy evaluation engine for node9 β€” DLP, smart rules, AST shell parsing, shields, loop de...
125 versions - Latest release: 1 day ago - 7.36 thousand downloads last month - 217 stars on GitHub - 1 maintainer
@iflow-mcp/node9-ai-proxy 1.11.3
The Sudo Command for AI Agents. Execution Security for Claude Code & MCP.
1 version - Latest release: 6 months ago - 24 downloads last month - 217 stars on GitHub - 2 maintainers
node9-ai 2.26.2
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are ...
166 versions - Latest release: 7 days ago - 9.39 thousand downloads last month - 217 stars on GitHub - 1 maintainer
@node9/proxy 2.26.2
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are ...
234 versions - Latest release: 7 days ago - 9.6 thousand downloads last month - 217 stars on GitHub - 1 maintainer
@pebbletek/mcp-shodan 1.0.17
A Model Context Protocol server for Shodan API queries. Forked from BurtTheCoder/mcp-shodan. Publ...
1 version - Latest release: over 1 year ago - 37 downloads last month - 0 stars on GitHub - 1 maintainer
resk-llm-ts 1.0.0
Comprehensive security toolkit for LLM applications - TypeScript
8 versions - Latest release: 6 months ago - 50 downloads last month - 7 stars on GitHub - 1 maintainer
nsauditor-ai 0.2.56
Modular AI-assisted network security audit platform β€” Community Edition
149 versions - Latest release: 1 day ago - 1.1 thousand downloads last month - 20 stars on GitHub - 1 maintainer
@j3ssie/metabigor 2.2.0 πŸ’°
Metabigor - OSINT power without API key hassle
6 versions - Latest release: about 2 months ago - 256 downloads last month - 1,847 stars on GitHub - 1 maintainer
raxuiscli 0.5.0
Cybersecurity CLI toolkit for pentest, CTF and security analysis
4 versions - Latest release: 17 days ago - 0 stars on GitHub - 1 maintainer
@siva_raja/uxsp 1.3.0
UXSP JavaScript/TypeScript Browser SDK
3 versions - Latest release: 23 days ago - 16.1 thousand downloads last month - 0 stars on GitHub - 1 maintainer
create-security-txt 2.0.0 πŸ’°
Create an RFC 9116 compliant security.txt file.
7 versions - Latest release: 4 days ago - 1 dependent package - 395 downloads last month - 7 stars on GitHub - 1 maintainer
Top 4.1% on npmjs.org
@nodesecure/js-x-ray 16.2.0
JavaScript AST XRay analysis
57 versions - Latest release: 1 day ago - 7 dependent packages - 10 dependent repositories - 12.4 thousand downloads last month - 288 stars on GitHub - 4 maintainers
@burtthecoder/mcp-shodan 1.0.32
A Model Context Protocol server for Shodan API queries.
19 versions - Latest release: 28 days ago - 1.86 thousand downloads last month - 173 stars on GitHub - 1 maintainer
@anonympins/fingerprint 0.8.4
Advanced anti-bot library for Node.js using multi-layer fingerprinting (JA3, client-side, headers...
58 versions - Latest release: 1 day ago - 5.35 thousand downloads last month - 5 stars on GitHub - 1 maintainer
@j3ssie/osmedeus 5.1.1 πŸ’°
Osmedeus - A Modern Orchestration Engine for Security
10 versions - Latest release: 24 days ago - 827 downloads last month - 6,592 stars on GitHub - 1 maintainer
sanitize-proxy 1.0.3
Redact and sanitize sensitive information in JavaScript objects
4 versions - Latest release: over 1 year ago - 23 downloads last month - 0 stars on GitHub - 1 maintainer
geiger-scan 0.4.0
A Geiger counter for AI agents: one read-only command that inventories every agent, harness, MCP ...
7 versions - Latest release: 15 days ago - 1.31 thousand downloads last month - 157 stars on GitHub - 1 maintainer
@pipelock/verifier-ts 0.4.1 πŸ’°
TypeScript reference verifier for Pipelock signed agent-egress receipts (Audit Packet v0, ActionR...
6 versions - Latest release: 3 days ago - 371 downloads last month - 920 stars on GitHub - 1 maintainer
cve-lite-cli 1.38.0 πŸ’°
Developer-friendly CLI for scanning JS/TS projects for dependency vulnerabilities using local loc...
63 versions - Latest release: 1 day ago - 35 thousand downloads last month - 750 stars on GitHub - 1 maintainer
@masonator/get-mcp-keys 1.0.1
A lightweight utility that securely loads API keys for Cursor MCP servers from your home director...
2 versions - Latest release: over 1 year ago - 41 downloads last month - 12 stars on GitHub - 1 maintainer
Top 2.9% on npmjs.org
codependence 1.0.15 πŸ’°
Enforce dependency version policy across projects, workspaces, and CI.
45 versions - Latest release: about 1 month ago - 9 dependent packages - 11 dependent repositories - 40.2 thousand downloads last month - 22 stars on GitHub - 1 maintainer
@aldegad/safedeps 2.17.2 πŸ’°
Dependency install safety gate with OSV-backed advisory checks, approved-spec ledger enforcement,...
22 versions - Latest release: about 2 months ago - 209 downloads last month - 22 stars on GitHub - 1 maintainer
@xyz/whois 2.5.2
A powerful TypeScript/JavaScript tool for comprehensive domain analysis, featuring detailed WHOIS...
3 versions - Latest release: over 1 year ago - 47 downloads last month - 0 stars on GitHub - 1 maintainer
vulnogram 0.1.0-rc1
Making the world safer one CVE at a time, since 2017. Tool for creating Security Advisories and C...
1 version - Latest release: about 4 years ago - 1 dependent package - 51 downloads last month - 246 stars on GitHub - 1 maintainer
dssrf 1.0.6 πŸ’°
SSRF defense library for Node.js with safe URL validation utilities.
7 versions - Latest release: 4 months ago - 17 thousand downloads last month - 8 stars on GitHub - 1 maintainer
Related Keywords
security 316 cli 150 nodejs 139 typescript 122 ai-security 111 mcp 80 cybersecurity 72 llm 69 prompt-injection 67 javascript 62 secrets 61 vulnerability-scanner 56 ai-safety 54 devsecops 53 content-moderation 50 jailbreak-detection 50 static-analysis 50 guardrails 50 prompt-injection-detection 49 jailbreak 49 wizard 49 sast 49 agent-security 49 ai-agents 44 security-audit 44 dotenv 44 secret-management 44 environment-variables 43 env 42 configuration-file 39 scanner 39 secret-manager 39 owasp 36 sarif 33 node 33 vulnerability 33 agents 32 supply-chain-security 32 llm-security 31 ai 30 developer-tools 29 security-scanner 29 claude-code 29 npm 27 cursor 26 audit 26 rust 26 compliance 25 open-source 24 ai-agent 24 privacy 24 threat-intelligence 24 cybersecurity-tools 23 threat-detection 23 appsec 23 model-context-protocol 23 penetration-testing 22 express 21 middleware 21 vulnerabilities 21 sandbox 20 multi-agent 20 npm-package 20 cyber-security 20 detection-engineering 20 openclaw-security 19 threat-hunting 19 clawdstrike 19 agentic-security 19 mcp-server 19 environment 19 multi-agent-systems 19 ai-security-tool 19 cyber-defense 19 endpoint-security 19 edr 19 security-automation 18 code-quality 17 web-security 17 config 17 settings 17 mcp-security 17 supply-chain 17 github-actions 17 cryptography 17 osv 17 security-as-code 17 nextjs 16 graphql 16 secrets-management 16 .env 16 variables 16 copilot 15 secure-development 15 password 15 dependency-scanning 15 cve 15 dependencies 15 hacktoberfest 15 fastify 15