v1.1.0 — GitHub Pages demo + CI fix + SEO overhaul

🎉 npm vulnerability scanner v1.1.0

🌐 Live demo

Try the npm vulnerability scanner in your browser (no install):
https://sudaisalamboy.github.io/npm-vulnerability-scanner/

🐛 Bug fixes

• Fixed #1: Scanner no longer recommends DOWNGRADING dependencies. findPatchedVersion() now filters fixed events to only versions strictly greater than the user's current version.

🔧 CI fixes

• Replaced broken bun run lint (Next 16 dropped next lint) with bunx tsc --noEmit typecheck.
• Self-scan job now uses continue-on-error: true (exit 1 = vulns found = tool working, not a CI failure).
• Added CodeQL workflow for automated security analysis.
• Added Pages workflow to deploy the demo site.

✨ New features

• GitHub Pages demo: fully working client-side scanner at https://sudaisalamboy.github.io/npm-vulnerability-scanner/
• CLI (bin/scan.ts): bunx --bun github:sudaisalamboy/npm-vulnerability-scanner bin/scan.ts ./package.json
• GitHub Action (action.yml): drop-in reusable composite action for CI/CD.
• One-command fix: consolidated npm install a@x b@y c@z that upgrades every vulnerable package at once.
• Auto-collapse Low-severity findings with expander (reduces alert fatigue).
• Hide zero-count filters (Critical (0) looked broken).

📄 Community files

• LICENSE (MIT), CONTRIBUTING.md, SECURITY.md, CHANGELOG.md, CODE_OF_CONDUCT.md

🔍 SEO improvements

• README keyword density: "npm vulnerability scanner" now 15x (was 1x).
• GitHub Pages with proper title, meta description, JSON-LD structured data, OG tags.
• 14 GitHub topics, keyword-rich alt text on screenshots, FAQ section.

---

Made by Sudais Alam

npm vulnerability scanner v1.0.0 — Free CVE Scanner + SBOM Generator

npm vulnerability scanner v1.0.0

Features

• 🔍 CVE scanning via OSV.dev (free, no API key)
• 📋 SBOM generation (SPDX 2.3 + CycloneDX 1.4)
• 📊 Dashboard with severity summary
• 💾 Download SBOM as JSON
• 🆓 100% free, open source

Tested

• Home: HTTP 200 ✓
• API scan: 7 vulnerabilities found for express+lodash ✓
• SBOM SPDX: 1 component generated ✓
• SBOM CycloneDX: supported ✓
• CI: passing ✓

---

Made by Sudais Alam