depwarden-cli

DepWarden CLI — scan your pip, Poetry, or Pipenv project for supply-chain vulnerabilities.

Quick start

pip install depwarden-cli

APP_API_URL=https://depwarden.in \
APP_API_KEY=DEMO \
depwarden

Use DEMO as the API key for three free full-fidelity scans. Get a permanent key at depwarden.in.

Installation

pip install depwarden-cli

Zero dependencies beyond the Python standard library — nothing else lands in your environment.

Usage

depwarden [options]

The CLI auto-detects your lockfile (requirements.txt, poetry.lock, Pipfile.lock, uv.lock, then pyproject.toml), in that order.

Options

Environment variables

HTTP_PROXY / HTTPS_PROXY / NO_PROXY are honoured automatically (standard urllib behaviour) — no extra configuration needed behind a corporate proxy.

Exit codes

GitHub Actions

- name: DepWarden SCA scan
  env:
    APP_API_URL: https://depwarden.in
    APP_API_KEY: ${{ secrets.APP_API_KEY }}
  run: |
    pip install depwarden-cli
    depwarden --formats html --out reports

Download reports

depwarden --formats html,pdf,xlsx --out ./security-reports

Offline mode

The CLI caches the last successful verdict in .depwarden-cache/. If the server is unreachable, it falls back to the cached result for up to 24 hours (configurable via --cache-grace).

💸 Enjoying this? Your wallet has feelings too.

The free tier is real — no account, no credit card, no sighing. But if you've been meaning to set up proper build gating, PDF reports your manager can pretend to read, and an audit trail for the one time a log4shell happens on your watch…

Upgrade at depwarden.in/pricing →

Plans start at a price that's genuinely less than your last debugging session cost in lost time. Use DEMO as your API key for three full-fidelity test drives before committing.

Links

• depwarden.in
• Documentation
• All plugins
• Pricing
• Support

License

MIT — see LICENSE.