Repository navigation
v0.2.3
Compromised releases of trusted packages are flagged reliably: CWE-506 malware advisories count as malicious even without an OpenSSF MAL- entry (ua-parser-js 0.7.29, event-stream 3.3.6), npm scoped names are decoded, and MAL- entries merge with their GitHub advisory. See CHANGELOG.md.