These Terms of Service ("Terms") are a legal agreement between you and DepWarden ("we", "us", "our"), operator of DepWarden. By accessing or using the DepWarden website, application, plugins, CLI or API (together, the "Service") you agree to these Terms. If you do not agree, do not use the Service.
DepWarden performs software composition analysis of the dependency manifests, lockfiles and software bills of materials you submit, reporting known vulnerabilities, malicious packages, licence obligations and end-of-life status. A free tier is available for anonymous use with no account. Paid subscription plans add additional report formats, build-gating, transitive fix paths, longer retention, static analysis and higher usage limits, as described on our pricing page.
You must be capable of forming a binding contract to use the Service, and for business plans you must be authorised to bind the organisation you represent. Paid features are accessed through API keys or an account; you are responsible for keeping these credentials secret and for all activity that occurs under them. Notify us promptly of any suspected compromise.
Use the Service only to assess software you have the right to assess. You agree not to attack, overload, probe, scrape or reverse-engineer the Service, circumvent usage limits or entitlements, resell the Service without authorisation, or use it to facilitate unlawful activity. Automated or high-volume use outside your plan's limits may be throttled or blocked.
Paid plans are billed in advance on a recurring basis (monthly or annual) at the price shown at purchase for your selected plan and currency. Unless stated otherwise, subscriptions renew automatically at the end of each billing period until cancelled. You authorise us and our payment processor to charge the applicable fees, including renewals, to your chosen payment method. Prices are exclusive of applicable taxes (including GST or other indirect taxes), which will be added where required by law and shown separately on invoices. Prices may change; we will give reasonable notice, and changes take effect from your next billing period.
You may cancel a subscription at any time; cancellation stops the next renewal and your plan remains active until the end of the current paid period. Refund eligibility and the cancellation process are described in our Refund & Cancellation Policy, which forms part of these Terms.
The Service is designed to receive dependency coordinates — not your source code. Our handling of the limited data we process is described in the Privacy Policy. The reports, SBOMs, OpenVEX documents and NOTICE files the Service generates from your input are yours to use for your own compliance and security work.
The Service, its software and its content are owned by DepWarden and protected by applicable intellectual-property law, except for underlying public vulnerability and licence data, which belongs to its respective sources (OSV.dev, CISA, FIRST, deps.dev, endoflife.date) and is subject to their terms. We grant you a limited, non-exclusive, non-transferable right to use the Service in accordance with these Terms and your plan.
Vulnerability and licence intelligence is drawn from public datasets that are excellent but never complete or perfectly timely. A clean result is not a guarantee that no risk exists, and the Service is not a substitute for professional security review. To the maximum extent permitted by law, the Service is provided "as is" and "as available" without warranties of any kind, whether express, implied or statutory.
To the maximum extent permitted by law, DepWarden shall not be liable for any indirect, incidental, special, consequential or exemplary damages, or for any loss of profits, data or goodwill, arising from or relating to your use of, or inability to use, the Service — including any decision made on the basis of a scan result. Our total aggregate liability for any claim relating to the Service shall not exceed the amount you paid us for the Service in the twelve months preceding the claim, or, for free use, INR 1,000. You remain responsible for your own security and compliance review.
You agree to indemnify and hold harmless DepWarden from claims arising out of your misuse of the Service or breach of these Terms.
We may suspend or terminate access that violates these Terms, poses a security or legal risk, or is materially overdue on payment. You may stop using the Service at any time. Provisions that by their nature should survive termination (including payment obligations, IP, disclaimers, liability limits and governing law) survive.
We may update these Terms as the Service evolves; material changes will be posted on this page with a new effective date, and continued use after an update constitutes acceptance.
These Terms are governed by the laws of India, and the courts at Mumbai, India shall have exclusive jurisdiction, without regard to conflict-of-laws principles.
Questions about these Terms: DepWarden, [email protected]. Full contact details are on our Contact page.