search

lunasec-io / lunasec

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
https://www.lunasec.io/
Other
1.44k stars 164 forks source link

finish npm fallback logic for cache misses on metadata #1136

Open breadchris opened 1 year ago

breadchris commented 1 year ago

Most of the code is written, the logic just needs to reflect this.

https://github.com/lunasec-io/lunasec/blob/master/lunatrace/bsl/ingest-worker/pkg/metadata/registry/npm.go#L80

The NPM registry should be used when there are errors when accessing the package from the database.