Grype
7.4#3 in software composition analysis softwareFree planFree planLinuxmacOSSelf-hostedWindows
VisitGrype vs lockhawk
What both publish
| Fact | Grype | lockhawk |
|---|---|---|
| License | The project is released under the Apache-2.0 License. | Lockhawk is distributed under the MIT license. |
| Purpose | Grype scans container images, filesystems, and SBOMs for known vulnerabilities. | Lockhawk scans npm dependencies for vulnerabilities locally and in CI/CD pipelines. |
Grype plans
- GrypeFree
- Grype open-source scannerFree
lockhawk plans
- FreeFree
Pick Grype if…
Grype suits developers and teams checking packages, images, filesystems, or SBOMs for known vulnerabilities. Its individual-package scanning is also intended for lightweight checks and compliance reviews of specific dependencies.
Pick lockhawk if…
You want what its maker publishes above — check its page for the details.