PackageFix

Free browser-based tool that scans a dependency manifest and returns a fixed, vulnerability-patched version.

Webfreeglobal

PackageFix is a free, browser-based tool that scans a pasted dependency manifest across ecosystems including npm, PyPI, Ruby, PHP, Go, Rust, and Java/Maven, then returns a fixed version with vulnerable packages patched. Beyond CVE scanning, it also flags typosquatting and unmaintained or suspicious packages, with no CLI or signup required.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of PackageFix - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim PackageFix to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether PackageFix (or something else) actually fits.

Try a problem