GitHub - binuka200/package-doctor: Scan Python dependencies for exploited CVEs and abandoned packages that handle untrusted input, ranked by CISA KEV and EPSS. Runs in CI and as a Claude Code hook.

Show HN: An OSS Python dependency scanner for exploited, unmaintained packages

Scan Python dependencies for exploited CVEs and abandoned packages that handle untrusted input, ranked by CISA KEV and EPSS. Runs in CI and as a Claude Code hook. - binuka200/package-doctor

3 points by binukajayaweera 33 days ago github.com 4 comments

Summary not yet generated for this article.

Original Text

I built an open source python dependency scanner that will scan and flag packages with known exploit CVEs(CISA's Known Exploited list and FIRST EPSS) and unmaintained packages that have not had a release or commit in 2 years. Theres also claude hook that will make your AI agent not install these type of packages included in this repo. The full mechanism is in the readme of the project, this was just a brief summary.

Comments (4 of ) ⌛

Loading more comments... ⌛

Scroll down to load more comments

No comments available.