sherlockscan
PulseGate's liveness check found it on 3 Oct 2026; it is registered on GitHub and PyPI and has been in the index since 22 Aug 2026. How this is checked
sherlockscan is an open-source command-line tool that statically scans Python packages for supply-chain security risks. It is intended for developers and security teams reviewing dependencies before deployment.
Inferred · not functionally tested
Overview
6 featuresPurpose: Identifying supply-chain risks in Python packages before they enter a software project.
Inferred · not functionally tested
Audience: Python developers and security teams
Inferred · not functionally tested
Functions: Unknown
Interfaces: API: unknown · MCP: unknown · CLI: indicated (inferred, not tested) · Self-hosting: indicated (inferred, not tested)
Recorded constraints: pricing: open_source · license: MIT · platforms: CLI · deployment: cli, self_hosted
Constraint provenance is unknown; confirm requirements with the publisher.
Record sources: pypi.org · github.com. These links do not verify the individual claims.
sherlockscan sits in PulseGate's Application security & vulnerability scanning category. Inferred · not functionally tested: It focuses on identifying supply-chain risks in Python packages before they enter a software project. Inferred · not functionally tested: sherlockscan is an open-source project aimed at python developers and security teams. Basis unknown · not verified: sherlockscan is open source under the MIT license. Basis unknown · not verified: sherlockscan is available on the command line, and it can be self-hosted.
itsual builds and maintains sherlockscan, and it first shipped in 2025. The project is developed in the open on GitHub with 21 commits in the last 90 days. Inferred · not functionally tested: Key capabilities include package scanning, static analysis, and supply-chain checks.
Summary written by a language model from the project’s public pages.
Tasks: Inferred · not functionally tested
- Package scanning
- Static analysis
- Supply-chain checks
- Python support
- Risk detection
- CLI workflow
Topics: Inferred · not functionally tested
Built with & integrations
Trust & compliance
Indexing history
1What PulseGate has recorded for this listing
Frequently asked questions about sherlockscan
- What does sherlockscan do?
- Inferred · not functionally tested: Sherlockscan focuses on identifying supply-chain risks in Python packages before they enter a software project. It is catalogued under Application security & vulnerability scanning on PulseGate.
- Who is sherlockscan for?
- Inferred · not functionally tested: sherlockscan is an open-source project built for python developers and security teams.
- Is sherlockscan free?
- Basis unknown · not verified: Yes — sherlockscan is open source under the MIT license and free to use.
- What platforms does sherlockscan run on?
- Basis unknown · not verified: sherlockscan runs on the command line. It can also be self-hosted.
- Is sherlockscan still maintained?
- PulseGate's liveness check found it on 3 Oct 2026. Its GitHub repository shows 21 commits in the last 90 days.
- Who makes sherlockscan?
- sherlockscan is developed by itsual.
- When did sherlockscan launch?
- sherlockscan first shipped in 2025.
- Is sherlockscan open source?
- Basis unknown · not verified: Yes — sherlockscan is open source under the MIT license, developed on GitHub.
Similar projects
Closest matches by what these projects do