JS-DEPENDENCY-AUDIT

A library to help perform a security audit check using a yarn (v1) lock file.

Not intended to be used as a standalone tool, but as part of a system periodically checking for vulnerabilities.

Usage

from js_dependency_audit.lock_file_content import LockFileContent
from js_dependency_audit.security_audit_request import request_security_audit

lock_file_content = LockFileContent.from_yarn_file("files/yarn.lock")
audit_data = request_security_audit(lock_file_content)

License

This project is licensed under the MIT License - see the LICENSE file for details.