The Frequency of Known Vulnerabilities in JavaScript
In ruby land, there's a great gem - <a href="https://github.com/rubysec/bundler-audit" rel="nofollow">https://github.com/rubysec/bundler-audit</a> - that lets you know when specific gem versions have a known security vulnerability.<p>We run it as part of our CI. When a vulnerability drops, it gets fixed pretty quickly since otherwise everyone's build fails.<p>Does anyone know of any equivalents for the JS world? A quick google finds <a href="https://github.com/nodesecurity/nsp" rel="nofollow">https://github.com/nodesecurity/nsp</a> but keen to hear what other people are doing.