{"id":23602658,"url":"https://github.com/pritchyspritch/loldeps","last_synced_at":"2026-02-02T03:32:21.636Z","repository":{"id":267984514,"uuid":"902964794","full_name":"pritchyspritch/LOLDeps","owner":"pritchyspritch","description":"LOLDeps stands for Living Off the Land Dependencies, it is a simple lightweight python tool that uses native package managers to highlight vulnerabilities in your package manifests and alerts you when it finds issues.","archived":false,"fork":false,"pushed_at":"2024-12-24T11:25:53.000Z","size":28,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-01-28T00:25:24.071Z","etag":null,"topics":["dependencies","dotnet","gem","npm","python","security"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/pritchyspritch.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-12-13T16:28:22.000Z","updated_at":"2024-12-24T11:27:02.000Z","dependencies_parsed_at":"2024-12-13T17:48:28.948Z","dependency_job_id":"fb4d72b2-9648-4b52-8f18-1577efc84e54","html_url":"https://github.com/pritchyspritch/LOLDeps","commit_stats":null,"previous_names":["pritchyspritch/loldeps"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pritchyspritch%2FLOLDeps","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pritchyspritch%2FLOLDeps/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pritchyspritch%2FLOLDeps/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/pritchyspritch%2FLOLDeps/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/pritchyspritch","download_url":"https://codeload.github.com/pritchyspritch/LOLDeps/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":239449583,"owners_count":19640535,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["dependencies","dotnet","gem","npm","python","security"],"created_at":"2024-12-27T12:12:12.072Z","updated_at":"2025-11-05T06:30:36.001Z","avatar_url":"https://github.com/pritchyspritch.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# LOLDeps\nLOLDeps stands for Living Off the Land Dependencies, it is a simple lightweight python tool that uses native package managers to highlight vulnerabilities in your package manifests and alerts you when it finds issues.\n\nThis tool was built to allow outdated packages to be discovered using the package manager vulnerability reporting modern languages often ship with. The need came from a project where .NET and nuget were in use and there was a need/want to raise errors in pipelines for vulnerability issues in packages without the need to install and maintain complex tooling when the package manager itself already does the job perfectly well. This tool simply makes it easier to run those checks, display issues, and break builds when issues are found.\n\n\n## Install\n\n`pip install LOLDeps`\n\n\n## Usage\n\n```shell\nusage: lold [-h] [--path PATH] [--failure-level FAILURE_LEVEL] [--ado]\n\noptions:\n  -h, --help            show this help message and exit\n  --path PATH           Path to the directory where your code and package manifest is held.\n  --failure-level FAILURE_LEVEL\n                        Provide the risk level that must be failed on. Options: critical, high, moderate\n  --ado                 Choose if you are running in Azure DevOps pipeline.\n```\n\n## Currently supported \n\n- dotnet list package --vulnerable (.net)\n- Azure DevOps pipelines error messaging\n\n## Roadmap\n\n- npm audit (js)\n- gem audit (ruby)\n- GitHub Actions pipeline error messaging\n- slack webhook integration options","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpritchyspritch%2Floldeps","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fpritchyspritch%2Floldeps","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpritchyspritch%2Floldeps/lists"}