CodeBox brings two pillars together in a single dashboard. Code Security scans a project's dependencies with OSV.dev, ranks flaws by severity (CVSS, EPSS and the CISA KEV catalog), rescans the inventory every night and sends alerts by email, Discord or webhook.
Legal Compliance offers sheets on the data protection laws of 21 countries, checked against the official texts, and a compliance checklist generated for each project's profile. An open source command-line tool reads lock files and never sends the source code anywhere.
The Problem
Teams shipping digital products in French-speaking Africa have to track both the flaws in their dependencies and data laws that differ widely from one country to the next, without a dedicated team.
The Solution
A Laravel API, a FastAPI analysis service, a Next.js site and a command-line tool: an inventory sent with one command, prioritized automatically, and a compliance module for each country.
The Result
In a few minutes, a project gets the list of its flaws ranked by risk and its legal obligations, with continuous monitoring.
