Terms of Use

Acceptance

By using Bundle Scan you agree to these terms. If you do not agree, please stop using the service.

Service description

Bundle Scan is a free tool that analyzes open-source packages for bundle size, dependency trees, and known security vulnerabilities. Results are provided for informational purposes only and should not be treated as a definitive security audit.

Data sources

Vulnerability and package information is sourced from publicly available databases. Bundle Scan does not independently verify this data and makes no warranties as to its accuracy, completeness, or timeliness. The data sources used are:

• OSV.dev (Open Source Vulnerability database, Google)
• GitHub Advisory Database
• NVD — National Vulnerability Database (NIST)
• npm Registry
• PyPI
• Maven Central

Each data source is governed by its own terms of service and licensing. Vulnerability data from NVD is provided by NIST and is in the public domain. GitHub Advisory Database data is licensed under CC BY 4.0. OSV data is provided under the Apache 2.0 License.

Acceptable use

You may not:

• Scrape or bulk-download data from Bundle Scan at a rate that degrades service for other users
• Use the service in any way that violates applicable law
• Attempt to reverse-engineer or interfere with the service

Disclaimer of warranties

Bundle Scan is provided "as is" without warranty of any kind. We do not guarantee that the service will be available, accurate, or error-free. Security information displayed is pulled from third-party databases and may be incomplete or out of date.

Limitation of liability

To the maximum extent permitted by law, Bundle Scan and its operators shall not be liable for any direct, indirect, incidental, or consequential damages arising from your use of or reliance on this service.

Changes

These terms may be updated at any time. Continued use of the service after changes are posted constitutes acceptance of the new terms.

Contact

Questions? thefalcon.dev