Who is vulnerablecode for?

vulnerablecode is an open-source project built for security analysts and developers.

Does vulnerablecode have a free plan?

Yes — vulnerablecode is open source under the Apache-2.0 license and free to use.

What platforms does vulnerablecode run on?

vulnerablecode runs on the web and the command line.

Is vulnerablecode still maintained?

The GitHub repository shows 278 commits in the last 90 days.

Who makes vulnerablecode?

vulnerablecode is developed by nexB.

When did vulnerablecode launch?

vulnerablecode first shipped in 2017.

Is vulnerablecode open source?

Yes — vulnerablecode is open source under the Apache-2.0 license, developed on GitHub.

Back to the index

vulnerablecode

Name: vulnerablecode
Author: nexB

github.comInfrastructure

vulnerablecode is an open-source tool and database for tracking vulnerabilities in open source software packages. It supports SBOM, CVE integration, and helps security analysts and developers manage software risks.

Open SourceApache-2.0WebCLI

Visit github.com

688stars

310forks

5features

2017since

Overview

5 features

vulnerablecode sits in PulseGate's Application security & vulnerability scanning category. It focuses on tracking and managing vulnerabilities in open source software packages for improved security. It is built as an open-source project for security analysts and developers. The project is open source (Apache-2.0). It runs on the web and the command line.

Behind vulnerablecode is nexB, and it first shipped in 2017. The project is developed in the open on GitHub with 688 stars and 278 commits in the last 90 days. Key capabilities include vulnerability database, open source, and SBOM support.

Summary written by a language model from the project’s public pages.

Vulnerability database
Open source
SBOM support
Dependency tracking
CVE integration

Built with & integrations

Connectors

github

Runs on

BrowserCLI

Trust & compliance

License

Apache-2.0

Verified signals

HTTPSOpen SourceFree tierGitHub · ★ 688Active maintenance

Indexing history

What PulseGate has recorded for this listing

Indexed26 Jun · 01:45 UTC
Listing verified against its public source
Source: PulseGate · Open

Frequently asked questions about vulnerablecode

What does vulnerablecode do?: Vulnerablecode focuses on tracking and managing vulnerabilities in open source software packages for improved security. It is catalogued under Application security & vulnerability scanning on PulseGate.
Who is vulnerablecode for?: vulnerablecode is an open-source project built for security analysts and developers.
Does vulnerablecode have a free plan?: Yes — vulnerablecode is open source under the Apache-2.0 license and free to use.
What platforms does vulnerablecode run on?: vulnerablecode runs on the web and the command line.
Is vulnerablecode still maintained?: The GitHub repository shows 278 commits in the last 90 days.
Who makes vulnerablecode?: vulnerablecode is developed by nexB.
When did vulnerablecode launch?: vulnerablecode first shipped in 2017.
Is vulnerablecode open source?: Yes — vulnerablecode is open source under the Apache-2.0 license, developed on GitHub.

At a glance

Platforms: CLI
Languages: English
Open source: Yes · ★ 688
License: Apache-2.0
Built for: security analysts and developers
Model: Open source
Solves: Tracking and managing vulnerabilities in open source software packages for improved security.

Registered as

GitHub: nexB/vulnerablecode
PyPI: vulnerablecode

Developer

nexB

Community-driven

GitHub

Open source

View on GitHub

Stars: 688
Forks: 310
Open issues: 787
Last commit: 24 Jun 2026
Commits 90d: 278
Contributors: 54
Authorship: Community-driven
Default branch: main
Latest release: v39.0.0 · 17 Jun 2026

Index record

Indexed: 26 Jun 2026
Lifecycle: Alive
Last seen: 26 Jun 2026

Identity audit (12)

Slug: vulnerablecode-pypi-org
Lifecycle last checked: 8 Aug 2026
Verification state: Indexed for public listing
Listing state: Listed: yes
Index status: Included in index
Latest evidence snapshot: 26 Jun 2026
Timeline basis: Indexed-at chronology. This listing's first-seen date was written by the catalog backfill, not observed here, so it is not treated as a sighting.
Name from: Written by a language model from the project's public pages.
Category from: Recorded source: taxonomy-pass-b.
Summary from: Written by a language model from public pages.
Languages from: Detected by a language model from page content.
Canonical URL: https://github.com/nexB/vulnerablecode

Ship this? Send a correction — no account, and you get a link to follow it.

Similar projects

Closest matches by what these projects do

OpenVulnhuggingface.co