GeoaCVE Guard

02 Check your stack

Which of these are actually yours?

Drop the lockfiles of the projects you run. Every match is ranked by real danger (exploited now, likely soon, impact) and explained for your context: direct or transitive, dev-only, fix available.

Drop lockfiles here

package-lock.json, npm-shrinkwrap.json, pnpm-lock.yaml, yarn.lock, bun.lock, requirements.txt, requirements-*.txt, poetry.lock, uv.lock, Pipfile.lock, Cargo.lock, go.mod, go.sum, Gemfile.lock, vendored *.min.js

    Paste a lockfile instead
    Use the API

    Lockfiles are processed in memory and stored only when you ask for a report or a watch.

    Your agent can do the same with the check_stack tool; the REST API takes the same JSON. Results are also available as a shareable proof report and as a watched stack with its own RSS feed.