usefulweb.appDependable little tools for people and AI agents. Security & supply-chain explorers

Security & supply-chain explorers

Vulnerabilities, SBOMs, containers, provenance, OAuth scopes and advisories. · 13 tools

  • Artifact Provenance Explorer

    Verify npm build provenance: Sigstore signature, transparency log, source repo and commit.

    Uses live data · JSON API · MCP

  • C2PA Credentials Inspector

    Read C2PA Content Credentials in images and videos: actions, AI hints, signer and signature.

    JSON API · MCP

  • Container Image Explorer

    Inspect a container image: platforms, layers, base image, root user, labels and cosign signature.

    Uses live data · JSON API · MCP

  • CVE Relationship Graph

    One CVE or GHSA as a graph: aliases, affected packages, fixed versions, KEV status and EPSS.

    Uses live data · JSON API · MCP

  • Dependency Vulnerability Explorer

    Known vulnerabilities in your dependencies, and the version that fixes each one.

    Uses live data · JSON API · MCP

  • OAuth Permission Explorer

    What an OAuth consent request really allows: scopes, risky combinations and flow problems.

    JSON API · MCP

  • Open Source Trust Explorer

    Is this open-source project maintained and trustworthy? Scorecard, activity and provenance.

    Uses live data · JSON API · MCP

  • Package Ecosystem Graph

    Who depends on what: resolved dependency graph, duplicates and the blast radius of breaking changes.

    Uses live data · JSON API · MCP

  • Passkey & WebAuthn Tester

    Test passkeys in your browser and decode WebAuthn responses: flags, AAGUID, signatures.

    JSON API · MCP

  • SBOM Explorer

    Open a CycloneDX or SPDX SBOM: components, licences, dependency tree and known vulnerabilities.

    Uses live data · JSON API · MCP

  • SBOM License Checker

    Check SBOM licences: SPDX expressions, copyleft class and conflicts with your project licence.

    JSON API · MCP

  • Security Advisory Timeline

    Disclosures, affected ranges, fixes and withdrawals for a package on one timeline, with time-to-fix.

    Uses live data · JSON API · MCP

  • Security Configuration Scanner

    Passive, graded check of a domain's TLS, security headers, DNS security and security.txt.

    Uses live data · JSON API · MCP

Categories

All categories →