Simon Willison has created a Python Vulnerability Lookup tool that scans Python project dependencies for known security vulnerabilities. The tool accepts pyproject.toml or requirements.txt files or GitHub repositories and queries the OSV.dev vulnerability database. It displays detailed vulnerability information including severity levels, affected versions, and links to disclosure reports.
Background
Software supply chain security has become increasingly important as dependency vulnerabilities can affect entire ecosystems. The OSV.dev database provides a standardized way to track vulnerabilities across open source packages.
- Source
- Simon Willison
- Published
- Mar 30, 2026 at 02:46 AM
- Score
- 6.0 / 10