Security Digest
Critical advisories by ecosystem
Every GitHub-reviewed advisory rated critical since October 2023, grouped by package ecosystem, with the command that checks your project.
- npm 499
npm audit (or: npm ls <package>) - PyPI 451
pip-audit (or: pip show <package>) - Go 391
govulncheck ./... - Maven 334
mvn dependency:tree -Dincludes=<groupId>:<artifactId> - Composer (PHP) 244
composer audit - crates.io (Rust) 65
cargo audit - RubyGems 33
bundle audit check --update - NuGet 32
dotnet list package --vulnerable --include-transitive - GitHub Actions 12
grep -rn 'uses: <owner>/<action>' .github/workflows - Swift 6
swift package show-dependencies - Hex (Erlang/Elixir) 6
mix hex.audit