openrewrite / rewrite-nodejs

Apache License 2.0
2 stars 1 forks source link

Add CVE markers to vulnerable dependencies #9

Closed timtebeek closed 3 months ago

timtebeek commented 3 months ago

What's changed?

Added copies of classes in rewrite-java-dependencies to statically compare versions, and if vulnerable, add the corresponding markers.

What's your motivation?

Helps both to visualize the issues found, as well as troubleshoot the recipe when it's not making code changes.