Demo data. This hosted preview shows seeded findings so you can explore the UI. For real scans of your repos, self-host or run the CLI. See the README.
Cross-project CVE & supply-chain response

Watch Commander

remediation · openrouterThreat radar
Open findings
8
From real scans
Critical / high
6
Risk engine output
Fixes available
8
Safe upgrade known
Approvals pending
0
Signed queue
Affected projects
ProjectRiskPackageReachabilityFixStatus
acme/mobile-backend68/100Django@4.2.0reachable→ 4.2.6open
acme/public-api-gateway95/100shelljs@0.8.4reachable→ 0.8.5open
acme/legacy-crm72/100ws@7.4.5reachable→ 7.5.10open
acme/data-api (PyPI)59/100requests@2.28.0reachable→ 2.31.0fix_available
acme/web-storefront21/100color-convert@1.9.0likely unused→ 2.0.1open
acme/web-storefront38/100minimist@1.2.5transitive→ 1.2.8open
acme/web-storefront64/100axios@1.4.0reachable→ 1.6.2fix_available
acme/web-storefront88/100lodash@4.17.11reachable→ 4.17.21pr_ready
Posture
  • Actively exploited (KEV)2
  • Malicious package alerts0
  • Fixes blocked0
  • Remediation jobs running0
  • Advisories scanned7
Integrations · 7/14 ready
OSV-Scanner CLICodex CLITelegramVercelOpenClawSBOMLocal roots