pranavkumaarofficial

pranavkumaarofficial/venvy

Offline, machine-wide Python supply-chain security audit - scan every virtual environment for vulnerable & malicious packages. CVE + typosquat detection, agent/CI-ready JSON. Also a lightweight venv manager.

4 good first / help-wanted issues · Python · last activity Jul 21, 2026

4 stars 1 forks 4 watchers Python MIT License
ai-agents cli conda cve dependency-scanning developer-tools devsecops environment-management malicious-packages offline osv pip-audit python sca security supply-chain-security typosquatting venv virtual-environment vulnerability-scanner
View on GitHub Website
4 Open Issues Need Help Last updated: Jul 21, 2026

Open Issues Need Help

View All on GitHub
No performance benchmark at scale (50-100 environments); dedup win is unproven 3 months ago
help wanted
pranavkumaarofficial/venvy
4

Offline, machine-wide Python supply-chain security audit - scan every virtual environment for vulnerable & malicious packages. CVE + typosquat detection, agent/CI-ready JSON. Also a lightweight venv manager.

Python
#ai-agents#cli#conda#cve#dependency-scanning#developer-tools#devsecops#environment-management#malicious-packages#offline#osv#pip-audit#python#sca#security#supply-chain-security#typosquatting#venv#virtual-environment#vulnerability-scanner
Conda-channel packages are not audited (only pip-installed packages inside conda envs) 3 months ago
help wanted
pranavkumaarofficial/venvy
4

Offline, machine-wide Python supply-chain security audit - scan every virtual environment for vulnerable & malicious packages. CVE + typosquat detection, agent/CI-ready JSON. Also a lightweight venv manager.

Python
#ai-agents#cli#conda#cve#dependency-scanning#developer-tools#devsecops#environment-management#malicious-packages#offline#osv#pip-audit#python#sca#security#supply-chain-security#typosquatting#venv#virtual-environment#vulnerability-scanner
venvy audit --scan: full-disk discovery is very slow (>120s) with no progress output 3 months ago
help wanted
pranavkumaarofficial/venvy
4

Offline, machine-wide Python supply-chain security audit - scan every virtual environment for vulnerable & malicious packages. CVE + typosquat detection, agent/CI-ready JSON. Also a lightweight venv manager.

Python
#ai-agents#cli#conda#cve#dependency-scanning#developer-tools#devsecops#environment-management#malicious-packages#offline#osv#pip-audit#python#sca#security#supply-chain-security#typosquatting#venv#virtual-environment#vulnerability-scanner
Expand malicious-package coverage: well-known typosquats are missed 3 months ago
help wanted
pranavkumaarofficial/venvy
4

Offline, machine-wide Python supply-chain security audit - scan every virtual environment for vulnerable & malicious packages. CVE + typosquat detection, agent/CI-ready JSON. Also a lightweight venv manager.

Python
#ai-agents#cli#conda#cve#dependency-scanning#developer-tools#devsecops#environment-management#malicious-packages#offline#osv#pip-audit#python#sca#security#supply-chain-security#typosquatting#venv#virtual-environment#vulnerability-scanner