check_dependencies
Scan project dependencies for known vulnerabilities using npm audit and the GitHub Advisory Database. Returns CVEs, severity levels, and patched versions to identify security risks.
Instructions
Run npm audit to check dependencies for known vulnerabilities.
Uses the GitHub Advisory Database (same as npm audit). Returns known CVEs, severity levels, and patched versions.
Requirements:
npm must be installed
Directory must contain package-lock.json (or yarn.lock/pnpm-lock.yaml)
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | Path to directory containing package.json and package-lock.json | |
| includeDevDependencies | No | Include devDependencies in scan (default: false) |