# OWASP/cve-lite-cli

> Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

## Fast Facts & Telemetry
- **Canonical URL**: https://githubrepo.cloud/repo/OWASP/cve-lite-cli
- **GitHub Source**: https://github.com/OWASP/cve-lite-cli
- **Global Rank**: #7,413 on GitHubRepo
- **Stars**: 769
- **Forks**: 172
- **Open Issues**: 67
- **Primary Language**: TypeScript
- **Software License**: MIT
- **Last Commit / Push**: Oct 17, 2026
- **Topics**: appsec, cve, cve-scanning, cybersecurity, cyclonedx, dependency-scanner, fast, fix-command, javascript, nodejs, npm, owasp, pnpm, sbom-enabled, sca, security, security-tools, vulnerability, vulnerability-scanner

## Project Overview
cve-lite-cli is an open-source project written in TypeScript: Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

Engineered for speed, consistency, and developer ease, it solves common hurdles in appsec, cve, cve-scanning. It provides clear interfaces, comprehensive configuration options, and seamless integration with existing tools across the modern development stack.

## Key Features
- Optimized execution pipeline written in TypeScript for predictable speed.
- Zero-friction configuration with comprehensive sensible defaults out of the box.
- Cross-platform runtime support across Linux, macOS, and Windows environments.
- Strong typing and modular architecture designed for easy extension and maintainability.
- Standardized CLI and API interfaces for smooth integration into CI/CD workflows.
- Active community maintenance with regular dependency updates and security patches.

## Installation & Quick Start
### Linux
```bash
npm install cve-lite-cli
```

### macOS
```bash
npm install cve-lite-cli # or: pnpm add cve-lite-cli
```

### Windows
```bash
npm install cve-lite-cli
```

## System Requirements & Architecture
- **Supported Platforms**: macOS, Linux, Windows
- **Runtime Dependencies**: Node.js >= 18, npm, pnpm or bun
- **Architecture**: x86_64, ARM64 (Apple Silicon & Graviton)

## How It Works
cve-lite-cli coordinates its core functionality through a modular TypeScript pipeline. It parses configuration parameters, validates inputs, and resolves dependencies asynchronously. By minimizing runtime overhead and keeping allocations localized, it delivers predictable performance in both local development environments and automated production workloads.

## Production Use Cases
### Command-Line Automation
Execute automated build, deployment, and maintenance tasks directly from the terminal.

### CI/CD Workflow Integration
Run non-interactive validation checks in GitHub Actions, GitLab CI, or local pre-commit hooks.

### Developer Environment Setup
Standardize local engineering workstations with single-binary utility commands.

### Scripting & Pipeline Orchestration
Chain complex multi-stage scripts with reliable error reporting and exits.

## Target Audience
Developers and engineering teams building with TypeScript, seeking reliable, tested, and actively maintained tooling for production workloads.

## Strengths
- Active community backing with 769 GitHub stars and verified adoption.
- Permissive open-source distribution under the MIT license.
- Built in TypeScript for high execution speed and developer familiarity.
- Cross-platform compatibility across modern Linux, macOS, and Windows environments.
- Clean modular design allowing flexible configuration and pipeline integration.

## Considerations
- Requires familiarity with TypeScript and modern CLI workflows.
- Ecosystem extensions may require manual configuration depending on environment constraints.
- Active development roadmap means breaking API changes may occur across major versions.

---
*Analyzed, indexed, and verified by GitHubRepo (https://githubrepo.cloud). Free public telemetry for open source creators and developers.*