Zovo Dependency Audit

Support

Need help with Zovo Dependency Audit or found a problem? Email support@zovo.one with a description of what you asked (in ChatGPT, Claude, or another app) and what happened. We reply within 2 business days.

Common questions

The AI app did not use it. Mention it by name in your request, for example "Use Zovo Dependency Audit to ...".

Is my data stored? Only the files it generates for you to download, for 1 hour; then they are deleted automatically. Nothing else is stored. See the privacy policy.

What can it not do?

Reads the listed direct dependencies only; it does not resolve the transitive dependency tree or read lockfiles.
Version ranges are checked at their stated minimum version; the version a lockfile installs can differ.
Git, path, workspace, URL and property versions are listed as skipped.
An empty vulnerability list means OSV.dev lists no known vulnerability for that version, not that the package is safe.
License data comes from deps.dev and is not legal advice.
Up to 300 packages and 480 source requests per call; advisory details are loaded for up to 100 advisories per call.
Vulnerability records are cached for up to 24 hours and package release lists for up to 6 hours.