This repo is used to
- Run automated checks for vulnerabilities in Node.js dependencies that have already been made public.
- Track and communicate information about dependency vulnerabilities that are public and have not yet been addressed.
Automated checks are currently run through a GitHub action using dep_checker.
DO NOT REPORT OR DISCUSS VULNERABILITIES THAT ARE NOT ALREADY PUBLIC IN THIS REPO. Please report new vulnerabilities either to the projects for a specific dependency or report to the Node.js project as outlined in the Node.js SECURITY.md file.