Verifi CLI
Pre-releaseVerifi CLI is the open-source tool at the centre of Verifi. Point it at a project and it resolves your dependency tree, narrows to the vulnerable packages your code actually uses, and for each one gives you the fix, the reason, and how sure it is. verifi fix previews the change and, with --apply, makes it for you, right where developers already work, in the terminal and CI. It's early: the repository is public and we're building it in the open.
Only what you use
Resolve every dependency, direct and transitive, match it against OSV, and keep the vulnerabilities your code actually reaches. The rest drops off the list.
The fix, with a reason
For each one, the fix that clears it: upgrade to a safe version, or remove a direct dependency your code never imports, with the reason it works.
Preview, then apply
verifi fix previews the plan and writes nothing. Add --apply and it runs the package manager for you. At today's advisory confidence, nothing changes silently: you opt in, then run your tests.