51 ms·
You could run NPM Audit (https://docs.npmjs.com/cli/audit https://docs.npmjs.com/cli/audit)
by bbody 8y ago
You could run NPM Audit (https://docs.npmjs.com/cli/audit https://docs.npmjs.com/cli/audit)
- cellis 8y agoBut this wouldn’t catch issues with pushing immediately after being granted access, new github accounts pushing changes to libs with thousands of dependents, libs whose dependencies were yanked from npm. Only published vulnerabilities, right?
- bbody 8y agoMy apologies, I assumed you meant ones with known vulnerabilities. Given OP's link that was a bad assumption to make.