Use for dependency security audits and compliance checks. Use when auditing project dependencies for vulnerabilities, answering "is [library] [version] safe?" questions, or remediating vulnerable libraries. Also activates automatically when the user opens or modifies a manifest file (package.json, package-lock.json, yarn.lock, pnpm-lock.yaml, requirements.txt, pom.xml, Cargo.toml, go.mod, Gemfile, composer.json, build.gradle, *.csproj, pubspec.yaml, conanfile.txt, conanfile.py, project.clj, deps.edn, Package.swift, pubspec.lock, Package.resolved, Gemfile.lock, poetry.lock, uv.lock, Cargo.lock, composer.lock).
96
90%
Does it follow best practices?
Impact
99%
1.83xAverage score across 8 eval scenarios
Passed
No known issues
Node.js full audit with table report
Raw scan data file
30%
100%
Meterian format: safeVersions
0%
100%
nodejs language
0%
100%
Lock file preferred
100%
100%
Markdown table
100%
100%
Correct table headers
41%
100%
Summary line
58%
100%
Remediation offer
100%
100%
Reachability mention
0%
100%
Python lock file preferred over requirements.txt
python language
0%
100%
Lock file preferred
100%
100%
Pinned versions used
100%
100%
Raw scan data file
26%
100%
Meterian format: safeVersions
0%
100%
Markdown table
40%
100%
Summary line
100%
100%
Go module audit with golang language mapping
golang language
0%
100%
go.mod extraction
50%
100%
Raw scan data file
25%
100%
Meterian format: safeVersions
0%
100%
Markdown table
50%
100%
Summary line
100%
100%
Ruby gems audit with Gemfile.lock preference
ruby language
0%
100%
Gemfile.lock preferred
100%
100%
Pinned versions used
100%
100%
Raw scan data file
33%
100%
Markdown table
70%
100%
Summary line
100%
100%
Java Maven audit with pom.xml
java language
0%
100%
pom.xml extraction
90%
80%
Raw scan data file
66%
100%
Meterian format: safeVersions
0%
100%
Markdown table
80%
100%
Summary line
100%
100%
Ad-hoc library advisory lookup (Mode B)
All 6 advisories found
100%
100%
Severity correct
48%
100%
Descriptions present
100%
100%
Raw advisory data file
100%
100%
Meterian format: versionRange
0%
100%
.NET csproj audit with dotnet language mapping
dotnet language
0%
100%
Both csproj files scanned
100%
100%
PackageReference extraction
100%
100%
Raw scan data file
33%
100%
Markdown table
30%
100%
Summary line
100%
100%
Multi-language full-stack dependency audit
Finds all manifests
100%
100%
nodejs language
0%
100%
rust language
0%
100%
python language
0%
100%
Raw scan data file
46%
100%
Single scan
33%
100%
Markdown table
69%
100%
Summary line
91%
100%
Table of Contents