STACKHOLDER

Scan a repository

Paste a public GitHub repository URL or owner/name. STACKHOLDER reads dependency manifests and, when GitHub publishes one, the repository's software bill of materials. Repository code is never executed.

Only github.com repositories are supported.

Scanning runs on the server and reports each stage as it completes — nothing is simulated.

Recent public graphs