A Homebrew subcommand that checks installed packages for vulnerabilities via osv.dev

A small, focused gem that normalises CVSS vectors from any version (2.0, 3.0, 3.1, or 4.0) to a CVSS 3.1 CvssSuite object. Useful whenever a tool must compare or store scores across a live CVE feed that mixes CVSS versions.

Analyses your Gemfile.lock for dependency health across the full transitive graph: whether each gem is actively maintained (last activity on GitHub, GitLab, or Codeberg/Forgejo, plus release recency), outdated versions, archived repos, OpenSSF Scorecard scores, known vulnerabilities (deps.dev and...