fad-checker is an air-gapped, multi-ecosystem dependency auditor that scans various package ecosystems and committed artifacts without requiring build environments or network connectivity. It reads manifests and lockfiles directly from disk, supports multiple output formats including HTML and Word, and prioritizes CVEs using CISA KEV, EPSS, and CVSS scores. The tool also detects private/internal packages, deprecated or abandoned dependencies, and cryptographic material such as certificates and keys. It is designed for real-world professional code audits, enabling one-shot scans of large polyglot monorepos and producing audit-grade reports with provenance and delta comparisons.

fad-checker itself is a security tool that helps identify vulnerabilities, deprecated dependencies, private/internal packages, and cryptographic risks in source code repositories. It does not introduce a vulnerability or threat but rather mitigates risk by improving visibility and prioritization of security issues in dependencies and committed artifacts. There is no indication of any security flaw or exploit associated with fad-checker.

No remediation or patching is required as fad-checker is a security auditing tool, not a vulnerability. Users should consider adopting it to improve dependency auditing and supply chain risk management in air-gapped or complex environments.