https://github.com/pandatix/js-cvss

Common Vulnerability Scoring System (CVSS) made its way to the JS ecosystem
https://github.com/pandatix/js-cvss

cvss cvssv4 javascript jest npm typescript

Last synced: about 1 month ago
JSON representation

Common Vulnerability Scoring System (CVSS) made its way to the JS ecosystem

• Host: GitHub
• URL: https://github.com/pandatix/js-cvss
• Owner: pandatix
• License: mit
• Created: 2023-12-01T13:07:15.000Z (about 1 year ago)
• Default Branch: main
• Last Pushed: 2024-12-12T11:05:45.000Z (about 2 months ago)
• Last Synced: 2024-12-12T12:20:44.511Z (about 2 months ago)
• Topics: cvss, cvssv4, javascript, jest, npm, typescript
• Language: TypeScript
• Homepage:
• Size: 182 KB
• Stars: 5
• Watchers: 2
• Forks: 3
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Contributing: CONTRIBUTING
  • License: LICENSE
  • Code of conduct: CODE_OF_CONDUCT.md
  • Security: SECURITY.md

Awesome Lists containing this project

README

        


	
JS-CVSS

    

	


	

	

	

	


	



js-cvss is another Common Vulnerability Scoring System (CVSS) implementation, in TypeScript.

> **Note**

>

> Specified by [first.org](https://www.first.org/cvss/), the CVSS provides a way to capture the principal characteristics of a vulnerability and produce a numerical score reflecting its severity.

It currently supports :

 - [X] [CVSS 2.0](https://www.first.org/cvss/v2/guide)

 - [X] [CVSS 3.0](https://www.first.org/cvss/v3.0/specification-document)

 - [X] [CVSS 3.1](https://www.first.org/cvss/v3.1/specification-document)

 - [X] [CVSS 4.0](https://www.first.org/cvss/v4.0/specification-document)

> **Warning**

>

> It won't support CVSS v1.0, as despite it was a good CVSS start, it can't get vectorized, abbreviations and enumerations are not strongly specified, so the cohesion and interoperability can't be satisfied.

## How to use

From your project, you can add `@pandatix/js-cvss` to your NPM dependencies using the following.

```bash

npm install '@pandatix/js-cvss' -D

```

Then, from your code, import what you need (let's say `CVSS40``) and go on !

```ts

import { CVSS40 } from '@pandatix/js-cvss';

...

let vec = CVSS40('CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L');

console.log(vec.Score());

```