github OWASP/cve-lite-cli v1.17.0
v1.17.0 - CVE count display and shrinkwrap support

latest releases: v1, v1.18.1, v1.18.0...
7 days ago

Added

  • CVE count now shown alongside package count in all output modes: terminal summary reads ✗ Found 26 packages (35 CVEs), compact output reads 26 packages · 35 CVEs, verbose quick-take reads 35 CVEs matched overall, and the HTML report gains a dedicated CVEs severity card alongside the Packages card.
  • npm-shrinkwrap.json support: the scanner now detects and parses npm-shrinkwrap.json with correct precedence over package-lock.json when both are present.

Fixed

  • security-events: write permission added to the self-scan CI job so SARIF uploads succeed.

Docs

  • Getting Started page title shortened and added to top nav.
  • Ghost CMS case study added with full Before/After fix journey.
  • Socket CLI comparison expanded with structured sections.
  • README: strengthened hero differentiators, unique combination claim, and OWASP threading; added package manager logos section; added Press section with Help Net Security and Development Curated coverage.
  • Website homepage: added "As seen in" press bar with Help Net Security and Development Curated logos.
  • How It Works: added Vulnerability Data Sources section; removed redundant network-privacy doc.

Validation

  • npm test
  • npm run build

Don't miss a new cve-lite-cli release

NewReleases is sending notifications on new releases.