Move action to a different package, and call `is-my-node-vulnerable` API from it. - Githubissues

RafaelGSS / is-my-node-vulnerable

package that checks if your Node.js installation is vulnerable to known security vulnerabilities

MIT License

180 stars 6 forks source link

Move action to a different package, and call `is-my-node-vulnerable` API from it. #22

Open trivikr opened 2 days ago

trivikr commented 2 days ago

Is your feature request related to a problem? Please describe.

The module is-my-node-vulnerable is designed to be a CLI/API as well as GitHub Action.

The consumers of CLI/API need to download GitHub Action specific dependencies, like @actions/core which they don't need https://github.com/RafaelGSS/is-my-node-vulnerable/blob/050a05a0798054e069bd305e866a84e326bba558/package.json#L30

Describe the solution you'd like

Move action to a different package, and call is-my-node-vulnerable API from it.

Additional context

Discussion on Twitter: https://x.com/trivikram/status/1848096860755435622