No reviews yetBe the first to leave a review for versio
Maker
📌
With the countless attacks on npm registries and packages everyday, there is a dire need to understand how safe are the packages that we are using. Versio is pretty straight forward. Drop your package file, and versio checks the npm registry and the open source vulnerabilites database to check details about your package and if malicious, how to tackle it.
Report
Pasted in an old package.json from a side project and the CVE breakdown actually flagged a dependency I'd been ignoring for months. Migration guide was project-specific instead of generic boilerplate.
It would be super helpful if the dashboard could flag outdated scripts or unsafe postinstall hooks in the package.json directly, not just the dependencies. One quick visual badge for risky lifecycle scripts alongside the CVE section would save a lot of manual auditing for smaller teams like ours.
Report
Maker
@kozlupolat10866 got it, will surely add this. will get back to you, as soon as i add this.
Report
It would be super useful if versio could watch a repo and ping me when a dependency gets a new CVE or when a major version drops, so I'm not running the scan manually every week.
Report
Maker
@c_cank75781 great suggestion, will try to implement this and get back to you
Pasted in an old package.json from a side project and the CVE breakdown actually flagged a dependency I'd been ignoring for months. Migration guide was project-specific instead of generic boilerplate.
@osifil56668 thanks, glad you liked it
It would be super helpful if the dashboard could flag outdated scripts or unsafe postinstall hooks in the package.json directly, not just the dependencies. One quick visual badge for risky lifecycle scripts alongside the CVE section would save a lot of manual auditing for smaller teams like ours.
@kozlupolat10866 got it, will surely add this. will get back to you, as soon as i add this.
It would be super useful if versio could watch a repo and ping me when a dependency gets a new CVE or when a major version drops, so I'm not running the scan manually every week.
@c_cank75781 great suggestion, will try to implement this and get back to you