Smelly is a free Chrome extension designed to enhance security when dealing with open source dependencies. It provides real-time monitoring of package URLs on popular registries such as npm, PyPI, and NuGet. By extracting package names and versions from the URLs, Smelly queries the OSV.dev vulnerability database to identify any known issues. Users receive immediate feedback on outdated or insecure versions, along with recommended upgrades, directly in their browser.

This handy tool displays vulnerability details in a user-friendly popup, including CVE and GHSA identifiers, severity levels, and affected ranges. Additionally, it suggests the minimal secure version to which users should upgrade. Smelly is committed to privacy, as it does not collect any data or track user activity, ensuring all operations are conducted locally within the browser. Upcoming support for more ecosystems like Maven and Go is also planned.