Show HN: CLI that helps AI agents avoid vulnerable dependencies (github.com)

A new CLI tool named **deptrust** has been launched to help AI agents avoid using vulnerable package dependencies, addressing a common problem where outdated versions are frequently leveraged. This tool can check package versions across multiple ecosystems, including npm, PyPI, Go modules, and more, to identify known vulnerabilities through direct calls to public package registries and advisory databases without the need for a hosted service. For the AI/ML community, deptrust provides significant utility by allowing developers to ensure that the dependencies used by their AI agents are secure and up-to-date. Deptrust provides a clear risk assessment, categorizing known vulnerabilities into severity levels with corresponding recommendations for action. It also generates risk signals for recently published versions, prompting a review before adoption. By automating these checks, deptrust enhances the safety and reliability of AI applications, allowing developers to integrate practices that prioritize security, which is increasingly crucial as AI systems become more pervasive and impactful.