L84Dinner

4 ms·

1. 1.▲
   by L84Dinner 7y ago

   I work on this project, so I'm biased, for sure, but why not take a gander at: https://github.com/sonatype-nexus-community/auditjs By default we exclude devDeps (allowing you to run that later). The project functi
2. 2.▲
   by L84Dinner 7y ago

   1 - this is totally true. The problem here is it's excessively hard to tell someone what their risk profile is. Vulns kinda run a wild gamut, some occuring because you use a vulnerable method, but others because the library doesn'
3. 3.▲
   by L84Dinner 7y ago

   If you are doing Golang development, you might check out this project: https://github.com/sonatype-nexus-community/nancy