Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FEATURE]: Dependencies Security analysis (security-advisories) #33

Open
3 tasks
helabenkhalfallah opened this issue Nov 18, 2024 · 0 comments · May be fixed by #46
Open
3 tasks

[FEATURE]: Dependencies Security analysis (security-advisories) #33

helabenkhalfallah opened this issue Nov 18, 2024 · 0 comments · May be fixed by #46
Assignees
Labels
enhancement New feature or request
Milestone

Comments

@helabenkhalfallah
Copy link
Member

helabenkhalfallah commented Nov 18, 2024

✨ Description

🚀 Motivation

Dependencies Security analysis using GitHub Advisory Database:

In summary, the source of npm audit is the GitHub Advisory Database, 
which provides vulnerability information for npm packages. 
npm audit uses the Bulk Advisory Endpoint to fetch this data and applies CVSS scoring to determine the severity of vulnerabilities.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants