Billsprig · For business
A professional PDF invoice in seconds
Billsprig makes invoices, quotes and receipts as real PDFs in your browser.
Subscription
from $4/month▶ Make an invoice free
Store › Creator & AI apps › Depmoor
DepmoorLockfile scanner ranked by real exploits (CISA KEV + EPSS) · by CyberMax
Know which vulnerable dependency to fix first
Depmoor Pro: unlimited lockfile scans (npm, yarn, pnpm, pip, Poetry, uv, Cargo, Go, Composer, Bundler, Gradle, NuGet) ranked by CISA KEV and EPSS, CSV/SARIF/Markdown/JSON exports, saved projects with new-since-last-scan, and a CI API with 100 scans a day.
Checkout by StripeCancel any timeInstant delivery14-day refund
from $9/monthSee plans & buy
- Secure checkout by Stripe
- Tax handled at checkout
- Instant delivery by email
- 14-day refund if it doesn't work as described
- Cancel subscriptions any time
- Human support: cybermax.tools@gmail.com
Who it's for
- indie developers
- small agencies
- freelance developers
- small SaaS teams
Real sample output
| Package | CVE | Why | Fixed in |
|---|---|---|---|
| log4j-core 2.14.1 | CVE-2021-44228 | KEV · ransomware · EPSS >99.9% | 2.15.0 |
| log4j-core 2.14.1 | CVE-2021-45046 | KEV · EPSS >99.9% | 2.16.0 |
| spring-beans 5.3.17 | CVE-2022-22965 | KEV · EPSS 99.6% | 5.3.18 |
| spring-webmvc 5.3.17 | CVE-2022-22965 | KEV · EPSS 99.6% | 5.3.18 |
| log4j-core 2.14.1 | CVE-2021-45105 | EPSS >99.9% (not in KEV) | 2.17.0 |
a real Depmoor scan of the built-in Java sample (gradle.lockfile, 7 packages: 40 findings, 9 fix now, 4 in CISA KEV), OSV.dev + CISA KEV 2026.09.30 + FIRST EPSS 2026-09-29 (1 Oct 2026)
Why buyers pick Depmoor
1Ranked by what attackers use: CISA's exploited-in-the-wild list (KEV) and EPSS exploit odds, not just severity.
2One upgrade per package, plus a same-major option when there is one.
3CSV, SARIF and a CI API that fails the build only on fix-now findings.
4Pro $9/month · Team $29/month
How it works
- Drop a lockfile (or paste it): it is read in your browser.
- See every vulnerable package ranked fix now, fix soon or plan, with the fixing version.
- Pro: export CSV/SARIF, track new findings, and gate CI with the API key shown right after payment.
Plans & pricing
14-day money-back promise: if it doesn't work as described, email us within 14 days and we fix it or refund you in full. Refund terms.
Depmoor Pro: dependency vulnerabilities ranked by real exploits, monthly
$9/month
Depmoor Pro: unlimited lockfile scans (npm, yarn, pnpm, pip, Poetry, uv, Cargo, Go, Composer, Bundler, Gradle, NuGet) ranked by CISA KEV and EPSS, CSV/SARIF/Markdown/JSON…
Buy nowDepmoor Team: CI dependency risk gate for every pipeline, monthly
$29/month
Depmoor Team: everything in Pro plus a CI API with 2,000 scans a day for the whole team's pipelines (fail builds only on fix-now findings: CISA KEV or high EPSS), SARIF for…
Buy nowBest value
Depmoor Pro yearly: dependency risk scans, 2 months free
$90/year
Depmoor Pro for a year: unlimited lockfile scans ranked by CISA KEV and EPSS, exports (CSV, SARIF, Markdown, JSON), saved projects and a CI API with 100 scans a day.
Buy nowWhat's inside
Depmoor Pro: unlimited lockfile scans (npm, yarn, pnpm, pip, Poetry, uv, Cargo, Go, Composer, Bundler, Gradle, NuGet) ranked by CISA KEV and EPSS, CSV/SARIF/Markdown/JSON exports, saved projects with new-since-last-scan, and a CI API with 100 scans a day. Your licence key appears the moment checkout finishes. Cancel any time at depmoor.cybermaxtools.com/manage.
Refund policy
14-day money-back promise. If it doesn't work as described, email us within 14 days and we fix it or refund you in full. Duplicate charges are always refunded. Read the full policy.
Compare
- Which vulnerable dependency to fix first: Depmoor vs the alternatives (published prices, what is free, FAQ)
Questions
How do I get it after paying?
Checkout is handled by Stripe. Your download, licence key or API key and your receipt arrive by email right after payment.
Can I get a refund?
Yes. If it doesn't work as described, email us within 14 days and we fix it or refund you in full. See the refund policy.
Is checkout secure?
Card details go only to Stripe. CyberMax never sees them; sales tax or VAT is calculated at checkout.
Can I cancel?
Any time, from the link in your receipt email. You keep access until the end of the paid period.
Scan a lockfile free
Depmoor · from $9/month
Related products
Hoursprig · For business
Hours, overtime and pay, worked out
Hoursprig works out hours, overtime and pay from time cards and prints a signable timesheet, all in your browser.
from $15▶ Calculate hours free
Ledgermoor · For business
Bank statement PDF to Excel, on your device
Ledgermoor Pro converts bank statement PDFs to Excel, CSV and OFX in your browser with a balance check, including…
Subscription
from $5▶ Convert a statement free
Menumoor · For business
Print-ready menus and price lists in minutes
Menumoor makes print-ready menus and price lists in your browser: type or paste items, pick a design, download a 300…
Subscription
from $6/month▶ Make a menu free
Prices and plans generated from live Stripe data on 03 Oct 2026.
from $9/monthSee plans & buy