No install, no account, no write access

See what Rivet would say about your repository.

Paste a public GitHub repository. Rivet reads its manifests, checks every pinned version against OSV.dev, and shows you the same advisory report Rivetbot posts on an issue, down to the wording.

Public repositories only. Try

The same scan

The same manifest parsers and the same OSV.dev queries the bot runs on a real issue. No model invents a version here, advisories and fixed releases come from the database.

Read-only

A preview reads what anyone can read: public files over the public GitHub API. Nothing is written, no token is used, and private repositories are simply not visible.

Then it fixes them

Installing Rivet adds GitHub's own Dependabot alerts to this report, and lets the same engine upgrade the packages, fix the calling code and open one draft PR.