IsleAtlas is a desktop application for macOS and Windows that scans your npm, pnpm, and yarn projects for dependencies, security vulnerabilities, and version drift. It works offline - your code never leaves your machine.

Yes, IsleAtlas is free to use with up to 3 projects. The free tier includes OSV vulnerability database scanning, version drift detection, and workspace/monorepo support. Pro unlocks unlimited projects, GitHub Advisory cross-referencing, and export features.

Does IsleAtlas send my code to the cloud?

No. IsleAtlas is offline-first. Your source code never leaves your machine. The only network calls are to check package vulnerability databases (OSV and GitHub Advisory) when you enable vulnerability scanning.

What package managers does IsleAtlas support?

IsleAtlas supports npm, pnpm, yarn, and bun. It automatically detects your package manager based on lockfiles (package-lock.json, pnpm-lock.yaml, yarn.lock, bun.lockb).

What is version drift and why does it matter?

Version drift occurs when the same dependency has different versions across your projects. For example, React 18.2 in one project and React 17.0 in another. This can cause compatibility issues, inconsistent behavior, and makes maintenance harder. IsleAtlas detects and visualizes version drift across all your projects.

How does IsleAtlas detect vulnerabilities?

IsleAtlas checks your dependencies against the OSV (Open Source Vulnerabilities) database. Pro users also get GitHub Advisory database cross-referencing for higher confidence and fewer false positives. Vulnerabilities are matched against the specific versions installed in your projects.

IsleAtlas

Download IsleAtlas

Free to use with up to 3 projects. Your code stays on your machine.