TLDR Tech / InfoSec
CVE Lite CLI (GitHub Repo)
CVE Lite CLI is a fast, developer-friendly command-line interface tool for scanning JavaScript/TypeScript dependencies for vulnerabilities. It supports local lockfile scanning, matching against OSV (Open Source Vulnerabilities) databases, and provides visibility into both direct and transitive dependencies. The tool includes a --fix option for automated remediation, outputs results in JSON format, and offers practical guidance for resolving identified vulnerabilities.
Read the full story