What does sherlockscan do?

Sherlockscan focuses on identifying supply-chain risks in Python packages before they enter a software project. It is catalogued under Security & compliance platforms on PulseGate.

Who is sherlockscan for?

sherlockscan is an open-source project built for python developers and security teams.

Is sherlockscan free?

Yes — sherlockscan is open source under the MIT license and free to use.

What platforms does sherlockscan run on?

sherlockscan runs on the command line. It can also be self-hosted.

Is sherlockscan still maintained?

The GitHub repository shows 21 commits in the last 90 days.

Who makes sherlockscan?

sherlockscan is developed by itsual.

When did sherlockscan launch?

sherlockscan first shipped in 2025.

Is sherlockscan open source?

Yes — sherlockscan is open source under the MIT license, developed on GitHub.

Back to the index

sherlockscan

Name: sherlockscan
Author: itsual

PyPIInfrastructure

sherlockscan is an open-source command-line tool that statically scans Python packages for supply-chain security risks. It is intended for developers and security teams reviewing dependencies before deployment.

Open SourceMITCLISelf-hosted

Visit PyPI

Overview

6 features

sherlockscan sits in PulseGate's Security & compliance platforms category. It focuses on identifying supply-chain risks in Python packages before they enter a software project. sherlockscan is an open-source project aimed at python developers and security teams. sherlockscan is open source under the MIT license. sherlockscan is available on the command line, and it can be self-hosted.

itsual builds and maintains sherlockscan, and it first shipped in 2025. The project is developed in the open on GitHub with 21 commits in the last 90 days. Key capabilities include package scanning, static analysis, and supply-chain checks.

Summary written by a language model from the project’s public pages.

Package scanning
Static analysis
Supply-chain checks
Python support
Risk detection
CLI workflow

Built with & integrations

Runs on

CLISelf-hosted

Trust & compliance

License

MIT

Verified signals

HTTPSOpen SourceFree tierGitHubActive maintenance

Indexing history

What PulseGate has recorded for this listing

Indexed22 Aug · 07:17 UTC
sherlockscan verified against its public source
Source: PulseGate · Open

Frequently asked questions about sherlockscan

What does sherlockscan do?: Sherlockscan focuses on identifying supply-chain risks in Python packages before they enter a software project. It is catalogued under Security & compliance platforms on PulseGate.
Who is sherlockscan for?: sherlockscan is an open-source project built for python developers and security teams.
Is sherlockscan free?: Yes — sherlockscan is open source under the MIT license and free to use.
What platforms does sherlockscan run on?: sherlockscan runs on the command line. It can also be self-hosted.
Is sherlockscan still maintained?: The GitHub repository shows 21 commits in the last 90 days.
Who makes sherlockscan?: sherlockscan is developed by itsual.
When did sherlockscan launch?: sherlockscan first shipped in 2025.
Is sherlockscan open source?: Yes — sherlockscan is open source under the MIT license, developed on GitHub.

At a glance

Platforms: CLI
Languages: English
Open source: Yes (GitHub)
License: MIT
Built for: Python developers and security teams
Model: Open source
Solves: Identifying supply-chain risks in Python packages before they enter a software project.

Registered as

GitHub: itsual/sherlockscan
PyPI: sherlockscan

Developer

itsual

Solo developer

GitHub

Open source

View on GitHub

Stars: 0
Forks: 0
Open issues: 1
Last commit: 22 Aug 2026
Commits 90d: 21
Contributors: 1
Authorship: Solo
Default branch: main

Index record

Indexed: 22 Aug 2026
Lifecycle: Alive
Last seen: 22 Aug 2026

Identity audit (13)

Slug: sherlockscan-pypi-org
Lifecycle state recorded: 22 Aug 2026
Verification state: Indexed for public listing
Listing state: Listed: yes
Index status: Included in index
Latest evidence snapshot: 22 Aug 2026
Timeline basis: Indexed-at chronology. This listing's first-seen date was written by the catalog backfill, not observed here, so it is not treated as a sighting.
Name from: Written by a language model from the project's public pages.
Category from: Assigned by a language model.
Summary from: Written by a language model from public pages.
Languages from: Detected by a language model from page content.
Last updated: 22 Aug 2026
Canonical URL: https://pypi.org/project/sherlockscan

Ship this? Send a correction — no account, and you get a link to follow it.

Similar projects

Closest matches by what these projects do