SafeDep vet
github.com
Spec sheet
- Purpose
- vet finds malicious packages, known vulnerabilities, risky CI workflows, lockfile tampering and fresh dependency versions before they reach production.Read 10 Oct 2026 · github.com
- Support
- The project directs users to Discord and GitHub Discussions for questions, and its pricing page lists Community support for Free and Email support for Team.Read 10 Oct 2026 · github.com
- License
- The GitHub repository identifies vet as licensed under Apache-2.0.Read 10 Oct 2026 · github.com
- CI integrations
- The project documents a GitHub Action for pull request checks and report support for GitLab and Bitbucket.Read 10 Oct 2026 · github.com
- Ecosystems
- It reads manifests and lockfiles for npm, PyPI, Go, Maven, Gradle, Cargo, RubyGems, NuGet, Packagist, Pub and other ecosystems.Read 10 Oct 2026 · github.com
- Install options
- The repository lists installation through Homebrew, mise, Go install and a container image.Read 10 Oct 2026 · github.com
- Inventory
- vet inventories AI libraries and crypto algorithms called by code and can create CycloneDX xBOM and CBOM reports.Read 10 Oct 2026 · github.com
- No-account operation
- The vet CLI needs no account and sends no source code; it sends package ecosystem, name and version to SafeDep to retrieve package data.Read 10 Oct 2026 · github.com
- Output formats
- The CLI can write SARIF from a saved scan, and the project describes SARIF for GitHub code scanning.Read 10 Oct 2026 · github.com
- Policy
- CEL policy rules determine when a scan fails, and users can test rules against a saved scan.Read 10 Oct 2026 · github.com
- Privacy and security
- SafeDep's privacy policy says it uses TLS 1.2 or higher in transit and AES-256 encryption at rest, with SOC 2 Type II controls in progress.Read 10 Oct 2026 · safedep.io
- Release status
- The repository says the v2 branch is in alpha and that vet v1 on main remains the latest release.Read 10 Oct 2026 · github.com
- Scanning targets
- vet scans directories, Git repositories, container images, SBOMs, individual packages and tools installed on a machine.Read 10 Oct 2026 · github.com
- Threat intelligence
- vet checks packages against SafeDep Threat Intel, which the README says analyzes new package versions when registries publish them.Read 10 Oct 2026 · github.com
Plans and prices
Free Free up to 3 endpoints · no card · no expiry · 7-day findings history · community support Read 10 Oct 2026 · safedep.io
Team $100 a month billed monthly 5 endpoints at displayed price · 90-day findings history · 50 on-demand package scans/month · 125 on-demand repository scans/month · email support Read 10 Oct 2026 · safedep.io
Enterprise Priced on request volume endpoint pricing SSO · RBAC · MDM rollout · custom retention · SIEM/EDR integrations · dedicated support Read 10 Oct 2026 · safedep.io
Where Specifiction places it
- Software Composition Analysis Software#28 of 657.9
Alternatives to SafeDep vetAll alternatives →
Endor Labs Free plan 8.9 Visit 
DepWarden From $19/mo · Free plan 8.7 Visit 
Eclipse Steady Free plan 8.6 Visit 
Mend SCA From $20.83/mo 8.6 Visit 
Scantist Free plan 8.6 Visit