10 Services from sicher.halowerk.com

Queries OSV.dev for vulnerabilities across multiple package ecosystems and returns CVE identifiers, severity, summaries, and the minimum fixed version for each affected package.

Verifies the cryptographic integrity of an ordered audit log chain by recomputing SHA-256 record hashes and validating hash linkage, with optional Merkle root verification.

Queries abuse.ch MalwareBazaar, ThreatFox, and URLhaus to determine whether a file hash (MD5, SHA-1, or SHA-256) is associated with known malware, returning a consolidated known-malicious or unknown verdict.

Searches the Sigstore Rekor transparency log for entries matching an artifact hash and returns signing identity, inclusion time, source repository, and workflow provenance for all matching entries.

Verifies a JWT's structure, claims (expiry, nbf, iat, issuer, audience, lifetime), and cryptographic signature (HMAC, RSA, RSA-PSS, ECDSA) against a shared secret, PEM key, or JWKS endpoint.

Parses dependency files (package-lock.json, package.json, requirements.txt, go.mod, Cargo.lock) and generates a Software Bill of Materials in CycloneDX 1.5 or SPDX 2.3 format with package URLs per component.

Verifies a webhook payload signature against the canonical signing scheme of a named provider, using constant-time comparison, and returns the reconstructed signed string for debugging mismatches.

Fetches and parses the manifest, config, and layer metadata of an OCI or Docker container image directly from its registry without pulling layers or running the image.

Opens a TLS connection to a hostname and returns the full certificate chain with detailed per-cert metadata plus health signals like expiry countdown, coverage check, self-signed flags, and weak algorithm detection.

Looks up the declared open-source licence for each submitted package via deps.dev and categorises it by copyleft obligation level relevant to commercial and SaaS distribution.