3 ms·
Ok. Currently this is what I have in mind: NVD: https://nvd.nist.gov/download/nvd-rss-analyzed.xml https://nvd.nist.gov/download/nvd-rss-analyzed.xml — but ini
by KajMagnus 10y ago
Ok. Currently this is what I have in mind:
NVD: https://nvd.nist.gov/download/nvd-rss-analyzed.xml https://nvd.nist.gov/download/nvd-rss-analyzed.xml — but initially only for software I use myself. Otherwise there'll be too many vulns. In the distant future: a web scraper that analyzes the CVEs/NVDs automatically.
nchan: https://github.com/slact/nchan/blob/master/changelog.txt https://github.com/slact/nchan/blob/master/changelog.txt
(an Nginx module)
And some JS libraries: markdown-it, sanitize-html, React.js, + more. Perhaps I'll track them via https://nodesecurity.io/advisories https://nodesecurity.io/advisories if their terms-of-use allows this.
Play Framework. (via email list. It's a Scala web framework)
Silhouette. (via email list. It's an OpenAuth lib.)
In the future: More stuff. I'll try to remember to post an update, if I add/remove something that seems "significant". But this page will probably become read-only long before that.