pranavkumaarofficial/venvy

No performance benchmark at scale (50-100 environments); dedup win is unproven about 8 hours ago

help wanted

4

Offline, machine-wide Python supply-chain security audit - scan every virtual environment for vulnerable & malicious packages. CVE + typosquat detection, agent/CI-ready JSON. Also a lightweight venv manager.

Python

#ai-agents#cli#conda#cve#dependency-scanning#developer-tools#devsecops#environment-management#malicious-packages#offline#osv#pip-audit#python#sca#security#supply-chain-security#typosquatting#venv#virtual-environment#vulnerability-scanner

Conda-channel packages are not audited (only pip-installed packages inside conda envs) about 8 hours ago

help wanted

pranavkumaarofficial/venvy

4

Offline, machine-wide Python supply-chain security audit - scan every virtual environment for vulnerable & malicious packages. CVE + typosquat detection, agent/CI-ready JSON. Also a lightweight venv manager.

Python

#ai-agents#cli#conda#cve#dependency-scanning#developer-tools#devsecops#environment-management#malicious-packages#offline#osv#pip-audit#python#sca#security#supply-chain-security#typosquatting#venv#virtual-environment#vulnerability-scanner

venvy audit --scan: full-disk discovery is very slow (>120s) with no progress output about 8 hours ago

help wanted

pranavkumaarofficial/venvy

4

Offline, machine-wide Python supply-chain security audit - scan every virtual environment for vulnerable & malicious packages. CVE + typosquat detection, agent/CI-ready JSON. Also a lightweight venv manager.

Python

#ai-agents#cli#conda#cve#dependency-scanning#developer-tools#devsecops#environment-management#malicious-packages#offline#osv#pip-audit#python#sca#security#supply-chain-security#typosquatting#venv#virtual-environment#vulnerability-scanner

Expand malicious-package coverage: well-known typosquats are missed about 8 hours ago

help wanted

pranavkumaarofficial/venvy

4

Offline, machine-wide Python supply-chain security audit - scan every virtual environment for vulnerable & malicious packages. CVE + typosquat detection, agent/CI-ready JSON. Also a lightweight venv manager.

Python

#ai-agents#cli#conda#cve#dependency-scanning#developer-tools#devsecops#environment-management#malicious-packages#offline#osv#pip-audit#python#sca#security#supply-chain-security#typosquatting#venv#virtual-environment#vulnerability-scanner

Open Issues Need Help