By using DepWarden you agree to these terms. They're intentionally short and plain.
DepWarden is a free tool that analyses the open-source dependencies in a manifest, lockfile or SBOM for vulnerabilities, supply-chain risk, licenses and end-of-life status. It is provided as-is and as-available, without warranty of any kind.
Use DepWarden only to scan dependency manifests for software you have the right to assess. Don't attempt to attack, overload or reverse-engineer the service, and don't use it to facilitate unlawful activity. Automated or high-volume use may be rate-limited.
Vulnerability intelligence is sourced from public datasets including OSV, CISA KEV, FIRST EPSS, deps.dev and endoflife.date. These are excellent but never complete or perfectly timely. A clean result is not a guarantee that no risk exists, and DepWarden is not a substitute for your own security review.
Sessions are anonymous and expire automatically; data may be purged after expiry. We are not liable for any loss arising from use of, or inability to use, the service.
DepWarden and its content are protected by applicable intellectual-property law. The reports, SBOMs, OpenVEX documents and NOTICE files DepWarden generates from your input are yours to use freely for your own compliance and security work. The underlying vulnerability and license data belongs to its respective public sources (OSV.dev, CISA, FIRST, deps.dev, endoflife.date) and is subject to their terms.
DepWarden is offered free of charge and may change, pause or discontinue features at any time without notice. We may also update these terms as the service evolves; material changes will be reflected on this page with a new effective date, and continued use after an update constitutes acceptance. Because sessions are anonymous and short-lived, there is no account to migrate and nothing you need to do beyond reviewing this page.
To the maximum extent permitted by law, DepWarden is provided without warranties of any kind and we are not liable for any direct, indirect, incidental or consequential loss arising from use of, or inability to use, the service — including any decision made on the basis of a scan result. You remain responsible for your own security and compliance review. If you have a question about these terms, use the Contact link in the site footer.