Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

the lien-nvd also works from tools.deps #2

Open
raymcdermott opened this issue Jan 20, 2021 · 1 comment
Open

the lien-nvd also works from tools.deps #2

raymcdermott opened this issue Jan 20, 2021 · 1 comment

Comments

@raymcdermott
Copy link

raymcdermott commented Jan 20, 2021

I'm just wondering if this repo is adding any value? I don't think so right now but it could...

As a user of lein-nvd I would be happier to have something like this which understood the way tools.deps works more natively. For example I cannot set the project name in lein-nvd.

Also nvd brings dependencies that have CVEs and it's hard to untangle. In theory at least, with tools.deps a path could be calculated which obviates this serious problem.

rm-hull/nvd-clojure#46

Anyway - if these don't tickle your fancy, no worries. Just thought I'd make some suggestions.

@miikka
Copy link
Owner

miikka commented Jan 20, 2021

Hi, I don't really understand what you're asking for, but this was basically an experiment and I'm not really maintaining it right now. If you (or somebody else) feel like forking it and implementing whatever needed to make it truly deliver value, I encourage you to go ahead. It would be great to have "deps.edn native" dependency vulnerability scanner.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants