OWASP/cve-lite-cli
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.
⚡ Executive Summary & Quick Facts
Authoritative Sourcecve-lite-cli is cve-lite-cli is an open-source project written in TypeScript: Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance..
| Repository | OWASP/cve-lite-cli ↗ |
|---|---|
| Primary Category | appsec |
| Language & Stack | TypeScript |
| Software License | MIT |
| Community Traction | ★ 769 stars · ⑂ 172 forks · #7,407 globally |
| Maintenance | ● Active (Last commit: Oct 17, 2026) · 67 open issues |
| Target Audience | Developers and engineering teams building with TypeScript, seeking reliable, tested, and actively maintained tooling for production workloads. |
Star History
Add Live Star History & Verified Badges to README.md
Keep your repository README looking professional and dynamic. As our continuous crawler records new stars, these official SVG badges update in real time with zero maintenance.
Renders your high-resolution star trajectory chart right inside your GitHub README or project docs.
[](https://githubrepo.cloud/repo/OWASP/cve-lite-cli?utm_source=readme_chart)Compact Shields-style badges for your README header. Shows real-time stars and global ranking.
[](https://githubrepo.cloud/repo/OWASP/cve-lite-cli?utm_source=readme_badge) [](https://githubrepo.cloud/repo/OWASP/cve-lite-cli?utm_source=readme_badge) [](https://githubrepo.cloud/repo/OWASP/cve-lite-cli?utm_source=readme_badge)Momentum
+19
STARS · LAST 30 DAYS
1
PER DAY
#907
MOST-STARRED TypeScript
| Window | 7 days | 30 days | 90 days |
|---|---|---|---|
| Stars gained | +7 | +19 | +90 |
| Per day | 1 | 1 | 1 |
| Forks gained | +1 | +3 | +10 |
cve-lite-cli gained 19 stars in the last 30 days, about 1 a day, and now has 769. It is about 1 year old and has averaged roughly 769 stars a year. It ranks #907 among TypeScript repositories and #7,407 across all languages on GitHubRepo.
Trending Record
3
DAYS ON TRENDING
#8317
BEST RANK
Oct 17, 2026
FIRST APPEARANCE
Active
STATUS TODAY
cve-lite-cli has maintained a continuous presence across global trending indexes, peaking at #8317. Below is the 30-day activity profile:
💡 Overview
cve-lite-cli is an open-source project written in TypeScript: Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.
Engineered for speed, consistency, and developer ease, it solves common hurdles in appsec, cve, cve-scanning. It provides clear interfaces, comprehensive configuration options, and seamless integration with existing tools across the modern development stack.
⚡ Key Features
Optimized execution pipeline written in TypeScript for predictable speed.
Zero-friction configuration with comprehensive sensible defaults out of the box.
Cross-platform runtime support across Linux, macOS, and Windows environments.
Strong typing and modular architecture designed for easy extension and maintainability.
Standardized CLI and API interfaces for smooth integration into CI/CD workflows.
Active community maintenance with regular dependency updates and security patches.
📥 Installation
$ npm install cve-lite-cli⚙ System Requirements
Platforms
- • macOS
- • Linux
- • Windows
Runtime & Dependencies
Node.js >= 18, npm, pnpm or bun
Architecture
x86_64, ARM64 (Apple Silicon & Graviton)
🧠 How It Works
cve-lite-cli coordinates its core functionality through a modular TypeScript pipeline. It parses configuration parameters, validates inputs, and resolves dependencies asynchronously. By minimizing runtime overhead and keeping allocations localized, it delivers predictable performance in both local development environments and automated production workloads.
🎯 Production Use Cases
Command-Line Automation
Execute automated build, deployment, and maintenance tasks directly from the terminal.
CI/CD Workflow Integration
Run non-interactive validation checks in GitHub Actions, GitLab CI, or local pre-commit hooks.
Developer Environment Setup
Standardize local engineering workstations with single-binary utility commands.
Scripting & Pipeline Orchestration
Chain complex multi-stage scripts with reliable error reporting and exits.
🚀 Getting Started
Install cve-lite-cli using your package manager: `npm install cve-lite-cli`
Initialize your project workspace or configuration file for cve-lite-cli.
Import cve-lite-cli into your codebase or invoke it directly from your terminal.
Execute your test suite or run `cve-lite-cli --help` to verify successful setup.
👍 Strengths
⚠️ Considerations
⇄ Alternatives & Direct Competitors
👥 Who Should Use This
Developers and engineering teams building with TypeScript, seeking reliable, tested, and actively maintained tooling for production workloads.
🏆 Nearby in the Rankings
OWASP/cve-lite-cli is currently ranked #7,407 by stars across every repository tracked on GitHubRepo. These are adjacent projects:
| Rank | Repository | Language | Stars | Action |
|---|---|---|---|---|
| #7,400 | facebookincubator/Battery-Metrics | Java | ★ 770 | Compare ↗ |
| #7,400 | dragon1086/prism-insight | Python | ★ 770 | Compare ↗ |
| #7,400 | y3owk1n/neru | Go | ★ 770 | Compare ↗ |
| #7,400 | mpvRex/REX-Player | Kotlin | ★ 770 | Compare ↗ |
| #7,400 | androoAGI/starnet | JavaScript | ★ 770 | Compare ↗ |
| #7,407 | OWASP/cve-lite-cli This Project | TypeScript | ★ 769 | |
| #7,407 | fastmail/overture | JavaScript | ★ 769 | Compare ↗ |
| #7,407 | thingsboard/tbmq | Java | ★ 769 | Compare ↗ |
| #7,407 | vishal2376/snaptick | Kotlin | ★ 769 | Compare ↗ |
| #7,407 | VoltiusApp/voltius | TypeScript | ★ 769 | Compare ↗ |
| #7,412 | BaseXdb/basex | Java | ★ 768 | Compare ↗ |
Frequently Asked Questions
What does cve-lite-cli do? +
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.
What language is cve-lite-cli written in? +
The primary language is TypeScript. Topics include: appsec, cve, cve-scanning, cybersecurity, cyclonedx.
Is cve-lite-cli actively maintained? +
Yes, the last recorded push was on Oct 17, 2026 with 67 open issues being tracked.
How many stars does cve-lite-cli have? +
cve-lite-cli has 769 stars and 172 forks on GitHub.
How does cve-lite-cli rank among GitHub repositories? +
With 769 stars, OWASP/cve-lite-cli is ranked #7,407 globally across all repositories tracked on GitHubRepo and #907 among TypeScript projects.
What license is cve-lite-cli distributed under? +
The repository reports a MIT license. Always verify the repository LICENSE file for legal terms.
