Vannus records that this vendor has not disclosed which model it runs. Every finding below is quoted to the vendor’s own document, or marked not disclosed where the vendor publishes nothing.
Python dependency vulnerability scanner checking installed packages against the Safety DB — prevents unconscious smuggling of known-vulnerable libraries into production
Uses AI; provider not disclosed. Safety's own site describes LLM-powered analysis in its Data Engine, but no provider is nameable from any Safety-controlled page. We checked and found no first-party page naming it, and the entry says so rather than naming one for Safety. safetycli.com ↗
Not yet assessed. We publish a sovereignty position only where the vendor documents one — we do not infer it from a domain or a company name.
Vannus records, from the vendor's own published documents, the legal entity a customer contracts with, the country that entity sits in, and the governing law of its terms — and whether the vendor runs its own model or resells someone else's. Each finding is quoted to its source and dated, or marked not disclosed where the vendor publishes nothing. No paid placement on a record, in the catalog or in search — affiliate status is walled off from the record, enforced by a test in the build. See the methodology →