Enter any real package. Traces its full resolved dependency tree (via deps.dev) and cross-references every node against real vulnerability data (OSV.dev) and CISA's list of vulnerabilities under active exploitation.