5 Ways to Get Node.js Vulnerability Alerts
Here at Snyk, we maintain a database of known vulnerabilities in Node.js and front-end npm packages, called Vulnerability DB (also on GitHub). For each vulnerability, it includes a description of the vulnerability, additional references, and most importantly, how to remediate it. The remediations offered are typically either to upgrade to a new version of the package, or – for cases when you cannot or will not upgrade – to apply a patch created by the Snyk security team.
The best way to make sure your project (including all of its dependencies) is constantly monitored for new security risks is have Snyk monitor your specific dependencies for relevant new vulnerabilities. You can do so once using
snyk wizard or track your dependencies continuously by adding
snyk monitor to your deployment process. This way you’ll get a Snyk alert only for issues in the dependencies your specific project uses.
However, if you also want to get notified about all the new vulns we add to our DB, here are a few IFTTT recipes you’ll find useful. They’re all based on the Vulnerability DB RSS feed, so feel free to make your own recipes!