Audit your lockfile

Drop a package-lock.json below. Every resolved dependency is checked against OSV.dev in a single batched query. The file is parsed in your browser — only package names and versions are sent to the API.

Drop your package-lock.json here

or click to browse — package.json works too