Downloads all versions of a package and commits them into a git repository, leveraging git delta compression to reduce storage.

A git subcommand for analyzing package/dependency usage in git repositories over time

A Homebrew subcommand that checks installed packages for vulnerabilities via osv.dev

Compare files, URLs, or package URLs using diffoscope

A Ruby library for working with Software Bill of Materials in SPDX and CycloneDX formats. Supports parsing, generation, validation, and format conversion.

Generate typosquat variants of package names and check if they exist on package registries. Supports PyPI, npm, RubyGems, Cargo, Go, Maven, NuGet, Composer, Hex, and Pub.