snyk / vulncost

Find security vulnerabilities in open source npm packages while you code
https://marketplace.visualstudio.com/items?itemName=snyk-security.vscode-vuln-cost
MIT License
201 stars 38 forks source link

fix: #19 consistent vuln count across auth/unauth requests #21

Closed thisislawatts closed 4 years ago

thisislawatts commented 4 years ago

The authenticated and unauthenticated requests hit different parts of our system which take slightly different approaches to vulnerabilities when they appear multiple times within a single package. The former counts each instance of a vulnerability within a package, whereas the unauthenticated view will group these vulnerabilities based on a unique ID.

If you take a look at this example you can see appears multiple times as it has been introduced through 4 paths.

thisislawatts commented 4 years ago

:tada: This PR is included in version 1.2.0 :tada:

The release is available on GitHub release

Your semantic-release bot :package::rocket: