No account, no source upload — paste a manifest/lockfile and get OSV+KEV+EPSS-prioritized findings in a session-isolated workspace. Also ran a typosquat study: checked every single-char typo of the 30 most popular npm/PyPI packages against the real registries…