Check npm, PyPI, Go, Cargo, RubyGems and Composer lockfiles for known CVEs with OSV.dev, get the fixed versions, and flag GPL, AGPL and non-commercial licenses.
1 in the Claude listing