https://github.com/nodejs/nodejs-dependency-vuln-assessments
https://github.com/nodejs/nodejs-dependency-vuln-assessments
Last synced: 9 months ago
JSON representation
- Host: GitHub
- URL: https://github.com/nodejs/nodejs-dependency-vuln-assessments
- Owner: nodejs
- License: mit
- Created: 2022-07-13T21:08:18.000Z (about 4 years ago)
- Default Branch: main
- Last Pushed: 2025-09-20T05:19:11.000Z (10 months ago)
- Last Synced: 2025-09-20T07:12:42.038Z (10 months ago)
- Language: Python
- Size: 71.3 KB
- Stars: 15
- Watchers: 38
- Forks: 6
- Open Issues: 12
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
Awesome Lists containing this project
README
# node-js-dependency-vuln-assessments
This repo is used to
1. Run automated checks for vulnerabilities in Node.js dependencies that have
already been made public.
2. Track and communicate information about dependency vulnerabilities that
are public and have not yet been addressed.
Automated checks are currently run through a GitHub action using
[dep_checker](https://github.com/nodejs/nodejs-dependency-vuln-assessments/tree/main/dep_checker).
**DO NOT REPORT OR DISCUSS VULNERABILITIES THAT ARE NOT ALREADY
PUBLIC IN THIS REPO**. Please report new vulnerabilities either to
the projects for a specific dependency or report to the Node.js project
as outlined in the Node.js
[SECURITY.md](https://github.com/nodejs/node/blob/main/SECURITY.md) file.