Open Source Friday: Securing JavaScript Projects with CVE Lite CLI
CVE Lite CLI is a fast, local dependency vulnerability scanner for JavaScript and TypeScript projects. It supports npm, pnpm, Yarn, and Bun, classifies vulnerabilities as direct or transitive, validates fix versions with OSV, and provides exact upgrade commands. The project is an OWASP Lab Project. Project repository: https://github.com/OWASP/cve-lite-cli