Dependency Vulnerability Scanner: AI-Enhanced Security Audits
Scan your dependencies for vulnerabilities with AI-powered analysis that goes beyond CVE databases.
CVE Databases Are Not Enough
Traditional scanners check against known CVEs. But zero-days, misconfigurations, and risky dependency patterns slip through. AI-enhanced scanning analyzes code patterns in your dependencies to identify potential vulnerabilities before they're publicly disclosed.
How It Works
Upload your package manifest (package.json, requirements.txt, go.mod). The scanner checks CVE databases, analyzes dependency trees for transitive vulnerabilities, and applies AI pattern matching for emerging threats.
import Vincony from "vincony";
const client = new Vincony({ apiKey: "YOUR_API_KEY" });
const scan = await client.tools.scanDependencies({
manifest: "package.json",
lock_file: "package-lock.json",
depth: "full", // Include transitive dependencies
ai_analysis: true // Enable AI pattern matching
});
console.log(`Scanned ${scan.total_packages} packages`);
console.log(`Critical: ${scan.critical} | High: ${scan.high} | Medium: ${scan.medium}`);
scan.vulnerabilities.forEach(vuln => {
console.log(`[${vuln.severity}] ${vuln.package}@${vuln.version}`);
console.log(` ${vuln.description}`);
console.log(` Fix: upgrade to ${vuln.fixed_version}`);
console.log(` AI insight: ${vuln.ai_analysis}`);
});Automated Fix PRs
Don't just report — fix. The scanner generates upgrade commands and, for breaking changes, provides migration guides with code examples.
License Compliance
Beyond security, the scanner flags license compatibility issues. Mixing GPL and MIT? Using AGPL in a SaaS product? Get alerted before legal problems arise.
// Include license analysis
const scan = await client.tools.scanDependencies({
manifest: "package.json",
include_license_audit: true,
project_license: "MIT",
flag_licenses: ["GPL-3.0", "AGPL-3.0"]
});
scan.license_issues.forEach(issue => {
console.log(`⚠️ ${issue.package}: ${issue.license} — ${issue.concern}`);
});Pricing
5 scans/month on Free. Continuous monitoring and automated alerts on Pro and Enterprise.
Try It Free — 100 API Credits
Start using these tools today with Vincony's free Developer plan.
Get Free API Key