playrote.play.v1

mmodiqo/dependency-vulnerability-checkv1.1.2Public

Dependency vulnerability check

Recursively discovers common dependency lockfiles, checks pinned package versions against OSV per ecosystem, and returns deterministic findings with fix versions and novice-friendly guidance.

Read the full description

Discovery, the six per-ecosystem OSV queries, detail enrichment, and the report join are separate DAG steps, so ecosystem queries run in parallel, empty ecosystems skip with a label, failed detail lookups degrade to labeled minimal findings, and an interrupted run resumes at the failed stage without re-parsing lockfiles.

  • Published 17 Aug 2026
  • Downloads 11
  • Needs rote 0.62.0+
  • Digest sha256:d9da04cff2af…
  • Reference modiqo/dependency-vulnerability-check@1.1.2

Before you run it1 local tool

Everything here is checked on your machine when rote inspects the play. This page never learns what you have installed or which credentials you hold.

  • ○
    nodelocal tool

    Must be on your PATH. rote reports what it finds during inspect.

Inputs4, all optional

rote asks for these before running and shows the defaults it will use.

  • Rootroot

    Project directory or supported lockfile to scan

    optionalstringdefault .example .custom value allowed
  • Ecosystemsecosystems

    Comma-separated ecosystems to include, or auto; accepted values are npm,pypi,cargo,go,packagist,rubygems

    optionalstringdefault autoexample npm,pypicustom value allowed
  • Max packagesmax_packages

    Maximum unique pinned packages to query, from 1 through 2000

    optionalintegerdefault 500example 500custom value allowed
  • Include devinclude_dev

    Include development dependencies when the lockfile identifies them

    optionalbooleandefault trueexample truecustom value allowed

What it changes

No write operations are declared in this version's manifest.

Credentials remain in the recipient's local rote vault; this page and the publisher never receive them.

Runtime details
  • rote CLIversion 0.62.0 or newer
  • Servicesnone declared
  • Digestsha256:d9da04cff2af59f6a8eccd48fc2157466ab92b06abd5baf1f83a9956397c9169
  • Archive size17140 bytes
  • Published2026-08-17T23:57:27.313436+00:00
  • Published withrote 0.66.1

Credential values and current readiness remain local. Opening this page never prompts for a credential, opens an authorization browser, or calls a service this play uses.

A play is a published, versioned automation package that runs on your own machine through rote, a free command-line tool. Opening this page installs nothing and runs nothing.