envoic

Audit project dependencies for known vulnerabilities (CVEs). Supports npm, pip, Cargo, and Go. Zero API keys required. Safe-by-default: report-only mode, fix...

Runtime environment and configuration audit pack. Validates Node.js version, secrets workflow, HTTP headers, allowed commands, trusted proxy, disk budget, an...

Scan codebase for environment variables, generate .env.example, validate .env, and ensure .gitignore safety

Audit .env alias groups for missing required config, conflicting values, and canonical-key drift before deploy.

检查系统和Python环境，验证AI/ML及RAG开发所需工具、包、目录结构和配置是否完整，支持自动安装缺失依赖。

Scans Node.js/NPM and Linux packages for known vulnerabilities using the Google OSV API by analyzing dependencies and reporting related CVEs.