The safeguards map / 1.1 Code and dependencies
OWASP CVE Lite CLI
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
A local scanner for npm, pnpm and Yarn lockfiles that matches packages against OSV advisories and shows direct and transitive findings with fix guidance.
Where it sits
1.1 Code and dependencies (primary): Scans JavaScript and TypeScript lockfiles locally, matches the packages against OSV advisories, and reports direct and transitive findings with remediation guidance.
It scans npm, pnpm, and Yarn lockfiles locally, matches packages against OSV advisories
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who make it
- Runs
- by handin CI
Handoffs
consumes Vulnerability status: OSV
produces Findings: SARIF
Collector's note
The page does not name a release version; maturity rests on the Lab classification the OWASP page states.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.