SafeDep vet
SafeDep vet: A lightweight, free SCA CLI with broad scanning and policy controls for developer workflows. Ranked #28 of 65 in Software Composition Analysis Software by our editors (6.5/10); pricing: Free plan; best for developers wanting lightweight free SCA.
At a glance
- Editor score6.5 / 10
- PricingFree plan
- Best forDevelopers wanting lightweight free SCA
- Free planYes
- Paid fromFree
- SBOM generationYes
- Facts checked19 Sep 2026
Where it wins
- Free open-source CLI with dependency and malicious-package analysis
- Supports GitHub, GitLab, containers, SBOMs, and multiple report formats
- CEL policy enforcement supports license and software-quality governance
Where it doesn't
- Standalone use is limited to macOS and Linux
- Centralized reporting and governance connect through SafeDep Cloud
- No graphical interface is described for the standalone CLI
Our verdict on SafeDep vet
SafeDep vet is an open-source software composition analysis CLI for developers and security teams. It analyzes dependency manifests, source repositories, container images, and SBOMs for vulnerabilities, malicious packages, license issues, and software-supply-chain risks. The tool supports npm, PyPI, Maven, Go, Ruby, Rust, and PHP, along with Docker and OCI images and CycloneDX and SPDX SBOMs. It is designed for local or containerized use and can connect with SafeDep Cloud for centralized reporting and governance.
Pricing is straightforward for the standalone tool: vet is permanently free and open source. SafeDep Cloud has paid plans, adding a hosted path for centralized reporting and governance. The standalone CLI includes SBOM import, CycloneDX export, policy enforcement with CEL expressions, query mode for repeated analysis of saved scan data, and reporting in SARIF, JSON, CSV, HTML, Markdown, and GitLab formats. This makes the free offering more suitable for teams that want to run and integrate scans directly in their own workflows rather than begin with a hosted service.
Its ecosystem fit is a major strength. Pull request scanning works through GitHub Actions, while repository scanning supports GitHub and GitLab; GitLab CI, Docker, and SafeDep Cloud are also supported integrations. AI usage discovery, agent mode, and an MCP server extend the tool beyond conventional dependency checks. Developers who want a self-hosted, command-line SCA workflow with policy controls should consider SafeDep vet. Teams that require a macOS- or Linux-compatible tool with centralized cloud governance can pair it with SafeDep Cloud, while teams seeking a broader standalone platform experience should look elsewhere.
Your product? Our editors can test SafeDep vet in depth and publish a review, labelled as paid · from $149/mo →
SafeDep vet pricing
SafeDep vet fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| Supported ecosystems | npm, PyPI, Maven, Go, Ruby, Rust, PHP; Docker and OCI container images; CycloneDX and SPDX SBOMs |
| SBOM generation | Yes |
| Reachability analysis | Not verified |
| Pull request scanning | Yes |
| Monitored projects | Not verified |
| Deployment options | Self_hosted |
| Deployment | Desktop |
| Platforms | macOS, Linux |
| Integrations | 6 integrations: GitHub Actions, GitLab CI, GitHub, GitLab, Docker, SafeDep Cloud |
| Pricing | Free plan (source) |
| Website | github.com |
| Facts checked | 19 Sep 2026 |
SafeDep vet integrations
SafeDep vet lists 6 integrations on its own site.
- GitHub Actions
- GitLab CI
- GitHub
- GitLab
- Docker
- SafeDep Cloud
Alternatives to SafeDep vet
- Snyk Open SourceBroad SCA coverage with reachability, SBOMs, pull-request scanning, and monitoring.9.4
- FOSSAA mature SCA platform covering dependencies, SBOMs, containers, licenses, and policy controls.9.3
- Safeguard SCAA budget-conscious SCA platform with reachability analysis, SBOMs, and remediation workflows.9.1
See all SafeDep vet alternatives →
Used SafeDep vet? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used SafeDep vet for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
SafeDep vet is listed in our Software Composition Analysis Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/safedep-vet/"><img src="https://www.itechguides.com/best/badge/safedep-vet.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update