Support

Questions, wrong results or a feature request? Email yc@salesup.club and include the prompt you used and the package name, ecosystem and version. We reply within two business days.

Common questions

"Package not found". Check the spelling and ecosystem. Maven packages use group:artifact (for example org.apache.logging.log4j:log4j-core), Go uses the full module path (for example github.com/gin-gonic/gin), and scoped npm packages keep their scope (@types/node).

A vulnerability looks wrong or is missing. DepScout shows OSV.dev's data as published. Advisory corrections go to the original database (for example the GitHub Advisory Database); report DepScout problems to us.

My version range was not checked. Vulnerabilities are matched to exact versions. If you give a range like ^4.17.0, DepScout checks the version written in it (4.17.0); check your lockfile for the version actually installed.