Observed arrival · 2026-10-26
depweather: a daily vulnerability forecast
A free daily map of recent vulnerabilities across about 150 popular open-source packages and related runtimes and servers.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- Maintainers tracking vulnerabilities across popular open-source dependencies
- Worth noticing
- Magenta marks packages whose vulnerabilities appear on CISA’s Known Exploited Vulnerabilities list.
Field notes
The visualization can switch among a treemap, timeline, and counter, filter to seven or 30 days, and isolate CISA KEV entries. Its daily collection draws on OSV (including the GitHub Advisory Database and Bitnami), CISA KEV, FIRST EPSS, and NVD; severity is taken from upstream advisories. The page also offers the forecast in Markdown and the underlying data as JSON, plus documentation. It cautions that this is not a scan of a visitor’s own dependency tree.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
One card from the complete issue