oss-vulnerability-scanner

Detect up-to-date OSS vulnerabilities in project dependencies and provide actionable remediation suggestions. Use when: scanning pom.xml, package.json, requirements.txt, go.mod, Cargo.toml, *.csproj, or any other dependency manifest for CVEs; checking for outdated or abandoned packages; surfacing transitive dependency risks; identifying license compliance issues; proposing prioritized upgrade or replacement actions; or assessing supply chain security posture.