Skip to content

Implement Node.js dependency vuln assessments in Node.js #283

@fraxken

Description

@fraxken

One of the goal of Vulnera is to re-implement the following Node project that was written in Python: https://github.com/nodejs/nodejs-dependency-vuln-assessments/tree/main

What's the progression:

  • NVD database implementation
  • GitHub Advisory database

Note that the python script is using GitHub GraphQL API to fetch vulnerability:

github_vulnerabilities_query = gql(
    """
    query($package_name:String!) {
      securityVulnerabilities(package:$package_name, last:10) {
        nodes {
          vulnerableVersionRange
          advisory {
            ghsaId
            permalink
            withdrawnAt
          }
        }
      }
    }
"""
)

Metadata

Metadata

Assignees

No one assigned

    Labels

    help wantedExtra attention is needed

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions