list-nuget-vulns

the idea:

dotnet list package --vulnerable --include-transitive only shows that some package somewhere in ur project has a vulnerability. This script is going to show you what dependencies use the vulnerable package found, so you can update that specific package, or create an issue with the repo.

TODO:

• read dotnet command info
• parse info into obj
• get all packages in solution
• get all dependencies from each package
• check in what 'tree' the vuln exists
• show results in tree thingy(?)