Supply Chain
Software Composition Analysis (SCA) with malicious package detection, license compliance, exploitable path analysis, and SBOM generation.
Package Ecosystems
NuGet (.NET)
npm (Node.js)
pip/PyPI (Python)
Maven/Gradle (Java)
Go Modules
Cargo (Rust)
Capabilities
CVE/NVD Vulnerability Detection
Malicious Package Detection
License Compliance (GPL, AGPL, etc.)
Exploitable Path Analysis
SBOM Generation (SPDX/CycloneDX)
Deprecated Package Alerting
SLSA Framework Compliance