Show HN: DepWarden – free, anonymous dependency vulnerability scanner

A free and anonymous dependency vulnerability scanner called DepWarden has been introduced. It allows users to paste a manifest or lockfile and receive prioritized findings in a secure workspace without requiring an account or source upload. The scanner utilizes OSV, KEV, and EPSS prioritization. Additionally, a study was conducted on typosquatting in popular npm and PyPI packages, revealing that nearly a third of single-character typos of these packages are confirmed malicious. The study's methodology and data are available online. The findings are being discussed on a comments thread.