Saturday, 10 November 2018

Tool / resources for scanning npm packages for vulnerabilities?

I was curious what kinds of tools you guys have been using to ensure the npm packages you use in production code are secured? I know you can run an npm audit, but I was more curious about external tools that can scan your dependencies and provide recommendations on which are out of date, insecure etc.​It would also be helpful if this tool could be used for other types of package managers such as NuGet for .net apps.

Submitted November 10, 2018 at 02:07PM by randomFIREAcct

No comments:

Post a Comment