PackageFix is a free browser-based dependency security fixer. Paste your manifest file and get back a fixed version with every vulnerable package patched — ready to download in one click.
Platforms
- Online
United States



Apps similar to Dependency Track SaaS include GitHub, which has a free version. Other options are HarborGuard, Proscan AppSec, Snyk and OWASP Dependency-Track. You can choose from more than 10 Vulnerability Scanners like Dependency Track SaaS for the web, self-hosting, Mac, Windows and Linux.
PackageFix is a free browser-based dependency security fixer. Paste your manifest file and get back a fixed version with every vulnerable package patched — ready to download in one click.



vet is a tool for protecting against open source software supply chain attacks. To adapt to organizational needs, it uses an opinionated policy expressed as Common Expressions Language and extensive package security metadata including:



Self-hosted dependency security scanner that finds vulnerable third-party dependencies across your full tree, ranks them by active exploitation, and generates a CycloneDX SBOM.




SkillRisk is a specialized security analysis tool designed for the AI Agent ecosystem, specifically focusing on Claude Code and Model Context Protocol (MCP) skills.




A single pane of glass for understanding and mitigating risks across your entire codebase and supply chain.
