Platform 8 · Security & Audit Kits
Security Header and Policy Pack
built by Lars Holm
All levels 150 files 532 aboard
Open fare
€1–€100
Line KJ-133 Platform 8 · Security & Audit Kits
Rust Dependency Scanner CLI
A fast Rust command-line tool that scans lockfiles across ecosystems for vulnerable and abandoned packages.
119
builders
LH Maintained by Lars Holm
- Last updated October 2026
- English
- 44m of walkthroughs
- 20 files
What you get
5 items in the boxEvery bullet below is in the download, working, the moment your payment clears.
- Lockfile parsing across eight ecosystems
- OSV vulnerability lookups with caching
- Abandoned-package heuristics
- Table, JSON and SARIF output for CI
- Full Rust source and prebuilt binaries
What's in the box
3 parts · 20 files · 44m of walkthroughs
4 files with a 8m walkthrough video. This part is documented in the architecture guide, with notes on every decision and how to change it for your own project.
The full file tree and the walkthroughs are in your download, available straight after checkout.
9 files with a 21m walkthrough video. This part is documented in the architecture guide, with notes on every decision and how to change it for your own project.
The full file tree and the walkthroughs are in your download, available straight after checkout.
7 files with a 15m walkthrough video. This part is documented in the architecture guide, with notes on every decision and how to change it for your own project.
The full file tree and the walkthroughs are in your download, available straight after checkout.
3 parts · 20 files
44m total length
You will need
Short list, and deliberately so. If you meet these you can start today.
- Rust 1.78+ to build from source, or use the prebuilt binaries
About this product
The scanner reads Composer, npm, pnpm, Yarn, pip, Poetry, Cargo and Go lockfiles, checks every package against the OSV vulnerability database, and flags packages that look abandoned — no release in two years, archived repository or a single maintainer. It runs in seconds on large monorepos and outputs tables, JSON or SARIF for GitHub code scanning.
You get the full Rust source with a walkthrough of how it is built, so you can extend the rules, plus prebuilt binaries for Linux, macOS and Windows.
Frequently asked questions
Still unsure about something? Write to our contact page and a human answers, usually the same working day.
Only package names and versions are sent to the public OSV API, and an offline mode uses a downloaded database instead.
Checkout is handled on our provider's secure payment page. The moment your payment clears we email your personal access link and access code to the address you used at checkout, and the same link appears in your account library. There is nothing to install and nothing to wait for.
Email within 14 days of your purchase, quote your order number, and we refund the full amount to your original payment method. No form to fill in and no questions about how much of the product you watched.
What builders say
No reviews yet
Nobody has reviewed this product yet, so there is no score to show. Buy it, work through it, and your review could be the one that helps the next developer decide.
Your maker
LH
Lars Holm
Go and Rust engineer with a security habit
- 2,427 builders aboard
- 11 products published
- 5.0 maker rating
- Go
- Rust
- PostgreSQL
- Application security
- Linux hardening
Lars started out in penetration testing and moved into backend engineering, so he writes Go services the way an attacker would read them. He maintains the Go API and Postgres tenancy modules and the whole Security line. His audit kits explain the reason behind every check, because a checklist nobody understands gets skipped.
€21
EUR
One-time payment · lifetime access