4 ms·
I see a lucrative business opportunity in alerting users when pwned/vulnerable NPM packages are used in their projects. Maybe something like this exists already
by jameslk 8y ago
I see a lucrative business opportunity in alerting users when pwned/vulnerable NPM packages are used in their projects. Maybe something like this exists already?
- rpeden 8y agoSounds like Snyk: https://snyk.io/ https://snyk.io/
- scarejunba 8y agoGitHub does it for Ruby Gems.
- wild_preference 8y agoThey do it for NPM deps too.
- thecatspaw 8y agodependABot does it on github, theres lots of issues in other repositories referencing this issue (visible at the bottom of the thread)