@sentiness/check-osv-scanner
v0.1.2
Published
Sentiness check that reports known vulnerabilities in lockfiles via OSV Scanner.
Readme
@sentiness/check-osv-scanner
Runs osv-scanner scan --format json -L <lockfile> for supported JavaScript lockfiles and maps OSV
vulnerabilities to Sentiness security findings.
Supported lockfiles: package-lock.json, npm-shrinkwrap.json, pnpm-lock.yaml, and yarn.lock.
Findings point at the scanned lockfile and include packageName/packageVersion.
