TypeScript · MIT
OWASP/cve-lite-cli
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.
★ 786
Stars
187 forks · 97 open issues
+1.6/day
Growth · measured
Stars counted between two of our own snapshots roughly a week apart. The repository page gives the exact span.
41.7
Momentum / 100
see the breakdown below
7mo ago
Created
last push 3d ago
Star history
How this score was built
| Component | Weight | Earned | Why |
|---|---|---|---|
| Velocity | 55 | 7.9 | +1.6/day, log-scaled against a 750/day ceiling |
| Acceleration | 15 | 10.5 | last week ran 1.70× the monthly pace |
| Freshness | 15 | 15.0 | last push 3d ago; decays to zero at 180 days |
| Scale | 15 | 8.4 | 786 stars, log-scaled against 150k — stops a 3-star repo topping the board |
| Momentum | 100 | 41.7 | sum of the above |
Detail
| Topics | appseccvecve-scanningcybersecuritycyclonedxdependency-scannerfastfix-commandjavascriptnodejsnpmowasppnpmsbom-enabledscasecuritysecurity-toolsvulnerabilityvulnerability-scanner |
| Matched on | Security (cybersecurity, security, security-tools) |
| Short window | +11 stars over 7 days = 1.6/day |
| Long window | +24 stars over 26 days = 0.9/day |
| Lifetime average | 3.53 stars/day over 223 days |
| First seen here | 2026-10-11 |
| Last read | 2d ago |