MixAudit provides a mix deps.audit task to scan Mix dependencies for security vulnerabilities. It draw its inspiration from tools like npm audit and bundler-audit.

It fetches security advisories from the community-maintained elixir-security-advisories and validates them against the dependencies listed in a project mix.lock file.

It supports both human and JSON output format.