Get the full dependency tree for a package version, including transitive dependencies, to assess supply chain exposure. Lists direct and transitive deps with version constraints.
Fetch the SPDX licence identifier for an open source package version to verify licence compatibility before adding a dependency. Supports PyPI, npm, Maven, Go, Cargo, NuGet, and RubyGems.
Search GitHub, npm, and other registries for existing codebases and SaaS competitors before building from scratch. Avoid rebuilding what already exists.
Retrieve public details about a software package, including its description, latest version, license, repository links, homepage, and malicious status. Supported types: PyPI, npm, Maven, Golang, NuGet, Huggingface, RubyGems.
Retrieve a depth-bounded transitive caller/callee graph for a method symbol, with cycle detection and external callee marking. Outputs adjacency lists for callers, callees, or both.
Trace which exceptions a method can throw and whether they escape or are caught. Walks the call chain from method to throw sites, reporting escape paths and catch handlers for safe-call analysis.
Find Docker images and packages hosted on GitHub for specific users or organizations. Use this tool to discover available packages when you know the owner but need to locate their hosted resources.
Retrieve specific sections of FOSSA organization settings, including project defaults, registry configurations, notifications, privacy, and authentication. Request only needed sections to reduce API requests.
Locate all code call sites referencing [Obsolete]-marked symbols, grouped by severity and deprecation message, including third-party NuGet metadata. Prioritizes errors first, then usage count, to help plan .NET migrations.