Show HN: Depquiet, Triage NPM/pip/Dependabot alerts by reachability

Category: security

Tags: vulnerability-scanning, reachability-analysis, sbom, security, cli-tool

Score: 6.8/10 (Innovation: 6, Technical: 7, Documentation: 8, Utility: 6)

Depquiet is a CLI tool that triages vulnerability scanner output (npm audit, pip-audit, Trivy, Dependabot, etc.) by filtering alerts based on reachability analysis, dev-dependency status, EPSS scores, and community templates. It stands out by supporting many input formats and ecosystems (lockfiles, SBOMs, SARIF) and offering conservative, import-level reachability detection, helping developers cut through alert noise.

Target audience: devops, backend devs, security engineers

Repository: https://github.com/samuelrojas-dev/depquiet · Python · MIT · 1 stars

View on Hacker News