OWASP/cve-lite-cli v1.6.0

on GitHub

What's new

Added

• Bun lockfile support — CVE Lite CLI now parses bun.lock (the JSONC format introduced in Bun v1.1.38). Dev-only packages are detected via workspace dependency manifests, --prod-only filtering is supported, and fix commands emit bun add automatically.
• Breaking change labels — fix command tables now annotate major-version upgrade targets (e.g. 8.5.1 → 9.0.0) with (breaking change) so you know before running the command.

Full changelog

See CHANGELOG.md for details.