Depquiet, Triage NPM/pip/Dependabot alerts by reachability

depquiet is an open-source CLI that triages vulnerability alerts from npm audit, pip-audit, Trivy, Grype, Snyk, Dependabot, and SARIF scanners, filtering out advisories the application cannot reach, those affecting only devDependencies, and those with low exploitation probability. It can also scan lockfiles directly via the OSV.dev API.