scanner

scanner copied to clipboard

Bumps the npm_and_yarn group with 2 updates: [esbuild](https://github.com/evanw/esbuild) and [tsx](https://github.com/privatenumber/tsx). Updates `esbuild` from 0.23.0 to 0.25.0 Release notes Sourced from esbuild's releases. v0.25.0 This release deliberately contains backwards-incompatible changes. To...

dependabot[bot]

fraxken

docs: update scanner API

1

fraxken

This PR was opened by the [Changesets release](https://github.com/changesets/action) GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically....

github-actions[bot]

feat(scanner): add manifest integrity of root dependency in payload

1

clemgbld

Vulnera support pnpm by using `@pnpm/audit` but for the tree-walking we are not supporting pnpm as we are using Aborist (official NPM package). Not sure if there is an easy...

fraxken

Current implementation of DepWalker ignore most of the errors happening (sometimes for good reason) but this can hide issues and lead to a complicated debugging experience when a regression occur....

fraxken

feat(gh-scanner): add github organization dependency scanner

4

intincrab

(Scanner) new API to read/walk an SBOM

1

Sometimes we have an SBOM (json file) as input manifest. Package such as [@cyclonedx/cdxgen](https://www.npmjs.com/package/@cyclonedx/cdxgen) can produce that file for a given local project (package.json). My idea is to implement a...

fraxken

Contact replaces [authors](https://github.com/NodeSecure/authors). Goal: pull, clean up, and check the security of a package’s contacts (authors / maintainers). ### Today Only supports the scanner: highlights contacts, nothing more. ### Ideas...

fraxken