Skip to content

Show HN: Node Version Audit – Audit Your Node Version for Known CVEs and Patches

github.developerdan.com
3 pointslightswitch05discuss
On HN

I wrote Node Version Audit to automatically keep track of Node patches, particularly for releases that fix CVEs. While it can be ran directly, it is designed to run as part of a pipeline to produce warnings if the runtime version of Node has CVEs, or is no longer supported.

The cool part (IMO), is that Node Version Audit automatically keeps track of node releases and CVEs by parsing the change log, and so there is no curation needed to maintain it.

I would love any thoughts!

Comments

No comments yet.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.