Skip to content

v0.2.3

Choose a tag to compare

@ntavakol ntavakol released this 26 Oct 00:11
· 39 commits to main since this release

Compromised releases of trusted packages are flagged reliably: CWE-506 malware advisories count as malicious even without an OpenSSF MAL- entry (ua-parser-js 0.7.29, event-stream 3.3.6), npm scoped names are decoded, and MAL- entries merge with their GitHub advisory. See CHANGELOG.md.