search

madskristensen / Packman

A client-side package manager
Other
28 stars 7 forks source link

Audit installed packages against known vulnerabilities #21

Open tlk opened 8 years ago

tlk commented 8 years ago

Consider adding support for auditing packages against known vulnerabilities.

For inspiration:

Perhaps an idea for another tool...

madskristensen commented 8 years ago

The extension could retrieve the JSON list from https://github.com/RetireJS/retire.js/blob/master/repository/jsrepository.json and use it directly from both the UI and the validator in the packman.json file.