binuka200/package-doctor

Scan Python dependencies for exploited CVEs and abandoned packages that handle untrusted input, ranked by CISA KEV and EPSS. Runs in CI and as a Claude Code hook.

4 best points · 5 comments · 1 Hacker News post · 15 GitHub stars · View on GitHub

Hacker News discussions

• Show HN: An OSS Python dependency scanner for exploited, unmaintained packages (4 points, 5 comments, by binukajayaweera, 2026-09-19)