SafeDep vet

Plans and prices

Every plan, in full

On the record

CI integrations

The project documents a GitHub Action for pull request checks and report support for GitLab and Bitbucket.github.com · read 10 Oct 2026

Ecosystems

It reads manifests and lockfiles for npm, PyPI, Go, Maven, Gradle, Cargo, RubyGems, NuGet, Packagist, Pub and other ecosystems.github.com · read 10 Oct 2026

Install options

The repository lists installation through Homebrew, mise, Go install and a container image.github.com · read 10 Oct 2026

Inventory

vet inventories AI libraries and crypto algorithms called by code and can create CycloneDX xBOM and CBOM reports.github.com · read 10 Oct 2026

License

The GitHub repository identifies vet as licensed under Apache-2.0.github.com · read 10 Oct 2026

No-account operation

The vet CLI needs no account and sends no source code; it sends package ecosystem, name and version to SafeDep to retrieve package data.github.com · read 10 Oct 2026

Output formats

The CLI can write SARIF from a saved scan, and the project describes SARIF for GitHub code scanning.github.com · read 10 Oct 2026

Policy

CEL policy rules determine when a scan fails, and users can test rules against a saved scan.github.com · read 10 Oct 2026

Privacy and security

SafeDep's privacy policy says it uses TLS 1.2 or higher in transit and AES-256 encryption at rest, with SOC 2 Type II controls in progress.safedep.io · read 10 Oct 2026

Purpose

vet finds malicious packages, known vulnerabilities, risky CI workflows, lockfile tampering and fresh dependency versions before they reach production.github.com · read 10 Oct 2026

Release status

The repository says the v2 branch is in alpha and that vet v1 on main remains the latest release.github.com · read 10 Oct 2026

Scanning targets

vet scans directories, Git repositories, container images, SBOMs, individual packages and tools installed on a machine.github.com · read 10 Oct 2026

Support

The project directs users to Discord and GitHub Discussions for questions, and its pricing page lists Community support for Free and Email support for Team.github.com · read 10 Oct 2026

Threat intelligence

vet checks packages against SafeDep Threat Intel, which the README says analyzes new package versions when registries publish them.github.com · read 10 Oct 2026

Alternatives to SafeDep vet

D DepWardenWebWindows+4 S ScantistWebAPI+1 D DeepFilterNetWindowsMac+3 G GrypeWindowsMac+2 EL Endor LabsWebWindows+5 SO Snyk Open SourceWebWindows+3 S SocketWebWindows+5 TD Twira Dependency VulnerabilitiesWindowsMac+3

Every alternative, ranked