Check your project forcompromised dependencies

Paste your package-lock.json, pnpm-lock.yaml, yarn.lock, or requirements.txt. See in seconds whether you were exposed to one of 2026's supply-chain compromises.

Everything runs in your browser. Open the Network tab and watch: clicking Scan makes zero requests. Your lockfile never leaves your machine.