SentryVault is a professional-grade cybersecurity tool designed to audit project dependencies for known vulnerabilities using the Google OSV API. It provides automated risk assessment, historical scan tracking, and professional PDF reporting for Python and Node.js ecosystems.
- Smart Scanning: Real-time vulnerability detection for
requirements.txtandpackage.json. - Risk Visualization: Categorizes threats into Critical, Moderate, and Verified Safe.
- Audit History: Integrated SQLite3 database to manage and review previous security scans.
- Professional PDF Reports: Generates color-coded audit reports with remediation paths.
| Component | Technology | Function |
|---|---|---|
| Backend | Python / FastAPI | Core logic and API orchestration. |
| Database | SQLite3 | Persistent storage for scan metadata. |
| PDF Engine | FPDF | Automated generation of security audits. |
| Frontend | Jinja2 / HTML | Interactive dashboard for users. |
1. Install Requirements:
pip install -r requirements.txt2. Run Application:
uvicorn main:app --reloadAccess the dashboard at http://127.0.0.1:8000
The system analyzes the vulnerability data from OSV.dev and applies a custom scoring logic:
def get_risk_score(vulns):
if not vulns: return "Safe"
for v in vulns:
if "critical" in str(v).lower(): return "Critical"
return "Moderate"
This project is intended for security auditing and educational purposes. Always manually verify critical vulnerabilities before applying patches in a production environment.
Developed by ZUNATIC