GitHub Dependency Risk Overlay

Injects security and vulnerability badges from OSV directly into GitHub package.json files.

See known vulnerability signals beside exact dependency pins on GitHub. What it does: • Exact-version checks through OSV • Unpinned dependency warnings • Enriched vulnerability summaries Free tier: Scan package.json files on GitHub. Pro — $7.99 one time: Add requirements.txt support and enriched detail. Sold by Flintglade, not Google. Terms of sale and the 30-day repair-or-refund policy: https://flintglade.com/terms.html Privacy: working data stays in Chrome storage unless a feature explicitly contacts the source you choose. License validation sends only the product ID and opaque license key to Flintglade's license service. No ads or behavioral analytics.