OWASP Incubator Project Scans Dependencies in Seconds

CVE Lite CLI is a lightweight open source command line security scanner that operates on lockfiles during development. The tool focuses on JavaScript and TypeScript files and supports npm, pnpm, and Yarn. Developed by Sonu Kapoor and now community supported, it was recently adopted as an OWASP Incubator Project. The scanner tells developers which packages contain a vulnerability and how to fix it.