onyx — local-first WordPress vulnerability scanner. Reads the Wordfence feed from disk, no API, no accounts. MIT.