When a critical vulnerability lands in a framework everyone uses, Corfedo shows which of your repositories depend on it, at which version, and lets you search the code that uses it.
Web app · HTTP API · MCP server · CLI · Self-hosted
- Dependency inventory: manifests and lockfiles for npm, PyPI, Maven, Gradle, NuGet, Go, Cargo, Composer, RubyGems and more, plus Docker images, GitHub Actions, Terraform and Pulumi.
- Security findings: dependencies matched against OSV advisories, including GitHub Security Advisories, per repository and across the organization.
- Code search: find code, symbols and call sites across every repository.
- Built for AI coding agents: the same answers through MCP, the API and the CLI.
- Corfedo Work: background jobs, cron schedules and leases for .NET in your SQL database (PostgreSQL, SQL Server). An Apache-2.0 alternative to Hangfire, Quartz.NET and TickerQ.
- Corfedo Troupe: build one .NET executable from components and roles, run it combined or split per profile.
Corfedo is in active development. Get in touch