OSV.dev Has a Free API — Find Vulnerabilities in Any Open-Source Package

The Story

I was auditing a Python project with 47 dependencies. Running pip-audit found 3 vulnerabilities, but I needed more details — CVE descriptions, fix versions, affected ranges. The NVD API is slow and clunky.

Then I found OSV.dev — Google's open-source vulnerability database with a clean, fast API.

What Is OSV.dev?

How do you audit your dependencies? npm audit, pip-audit, Snyk, or something else? Drop your workflow in the comments!

Follow me for daily free API discoveries and security tools.