Package Ecosystems
npm/yarn/pnpm(package-lock.json)pip/poetry(requirements.txt,Pipfile.lock,poetry.lock)Maven/Gradle(pom.xml,build.gradle)Go Modules(go.mod,go.sum)NuGet(packages.config,.csproj)
Detect known vulnerabilities in open-source dependencies, transitive packages, and third-party libraries.
npm / yarn / pnpm (package-lock.json)pip / poetry (requirements.txt, Pipfile.lock, poetry.lock)Maven / Gradle (pom.xml, build.gradle)Go Modules (go.mod, go.sum)NuGet (packages.config, .csproj)