OWASP/cve-lite-cli v1.8.0

v1.8.0 - Usage-aware dependency analysis phase 1

on GitHub

Added

• Usage-aware dependency analysis phase 1: The CLI now statically analyzes project source code to detect if vulnerable dependencies are actually imported and reachable.
• Added --usage and --only-used flags. Used findings bubble to the top, and --only-used aggressively filters out unreachable/unused dependencies to eliminate noise.
• CLI tables now feature a dedicated Usage column indicating import counts or unused status, color-coded red and green.
• Migrated the breaking change annotation into its own dedicated Breaking? column with a ⚠ symbol in the fix plan tables.

Validation

• npm test
• npm run build