IsleAtlas is a desktop application for macOS and Windows that scans your npm, pnpm, and yarn projects for dependencies, security vulnerabilities, and version drift. It works offline - your code never leaves your machine.

Yes, IsleAtlas is free to use with up to 3 projects. The free tier includes OSV vulnerability database scanning, version drift detection, and workspace/monorepo support. Pro unlocks unlimited projects, GitHub Advisory cross-referencing, and export features.

Does IsleAtlas send my code to the cloud?

No. IsleAtlas is offline-first. Your source code never leaves your machine. The only network calls are to check package vulnerability databases (OSV and GitHub Advisory) when you enable vulnerability scanning.

What package managers does IsleAtlas support?

IsleAtlas supports npm, pnpm, yarn, and bun. It automatically detects your package manager based on lockfiles (package-lock.json, pnpm-lock.yaml, yarn.lock, bun.lockb).

What is version drift and why does it matter?

Version drift occurs when the same dependency has different versions across your projects. For example, React 18.2 in one project and React 17.0 in another. This can cause compatibility issues, inconsistent behavior, and makes maintenance harder. IsleAtlas detects and visualizes version drift across all your projects.

How does IsleAtlas detect vulnerabilities?

IsleAtlas checks your dependencies against the OSV (Open Source Vulnerabilities) database. Pro users also get GitHub Advisory database cross-referencing for higher confidence and fewer false positives. Vulnerabilities are matched against the specific versions installed in your projects.

IsleAtlas

Desktop app for macOS & WindowsBuilt with Tauri & RustYour code stays local

See all your projects.
One dashboard.

Scan dependencies and detect version drift completely offline.

Your code never leaves your machine.

Enable vulnerability checking only when you need it.

Download Free Get Pro

What is IsleAtlas?

IsleAtlas is a desktop dependency scanner and vulnerability tracker for npm, pnpm, yarn, and bun projects. It provides a unified dashboard to view all your Node.js projects, detect security vulnerabilities using OSV and GitHub Advisory databases, and identify version drift across your codebase.

At a Glance

Scan multiple npm projects at once
Find CVEs and security vulnerabilities
Detect version inconsistencies
Works offline - code stays local
Free for up to 3 projects

Built for developers who

Manage multiple frontend projects
Work with monorepos and workspaces
Care about supply chain security
Want visibility without cloud tools
Need to audit dependencies quickly

Multi-Project View

See all your projects at once. No more switching between repos to check dependency versions.

Vulnerability Scanning

Know about security issues before you push. Scans using both OSV and GitHub Advisory databases.

Version Drift Detection

React 18.2 here, 17.0 there? See version inconsistencies across all your projects instantly.

Everything you need to manage dependencies

Full vulnerability scanning is free for up to 3 projects. Pro unlocks unlimited projects and exports.

Free Forever

Up to 3 projects
OSV + GitHub Advisory vulnerability scanning (requires network)
Dependency graph visualization (offline)
Version drift detection (offline)
Workspace & monorepo support
npm, pnpm, yarn, bun detection

Pro license required to update app

Pro

Yearly license

Unlimited projects
Export to Markdown, JSON, CSV
AI-ready fix instructions
Priority support
Use on up to 3 devices
1 year of updates included

Simple, yearly pricing

Unlock all features and get a full year of updates.

IsleAtlas Pro

$29/year

Unlimited projects
Export reports and AI-ready fixes
Use on up to 3 devices
1 year of app updates

Get IsleAtlas Pro

See all your projects.One dashboard.