feat(scanning): advisory npm vulnerability scanning with admin UI#8

Merged

albanm merged 41 commits into

mainfrom

Jun 9, 2026

Commits on Jun 4, 2026

docs: design for advisory npm vulnerability scanning

albanm
and
claude
committed
docs: implementation plan for advisory npm vulnerability scanning

albanm
and
claude
committed
test: capture osv-scanner v2 sample output for bundled node_modules (spike)

albanm
and
claude
committed
feat(config): add scanning config block (off by default)

albanm
and
claude
committed
feat(scanning): add scan summary field, ArtefactScan type and collection

albanm
and
claude
committed
feat(scanning): osv-scanner output mapper with unit tests

albanm
and
claude
committed
feat(scanning): top-level install-script detection

albanm
and
claude
committed
feat(scanning): tarball-to-dir extraction with entry cap

albanm
and
claude
committed
feat(scanning): osv-scanner subprocess runner behind Scanner interface

albanm
and
claude
committed
feat(scanning): scan orchestration service (enqueue, run, rescanAll)

albanm
and
claude
committed
feat(scanning): scan endpoints, admin-only stripping, test-env helper

albanm
and
claude
committed
feat(scanning): scan on upload + periodic rescan wiring

albanm
and
claude
committed
feat(ui): admin vulnerability-scan panel for npm artefacts

albanm
and
claude
committed
build: bundle osv-scanner v2 in the runtime image

albanm
and
claude
committed
docs: document advisory npm vulnerability scanning

albanm
and
claude
committed
refactor(scanning): address review — populate vulnDbUpdatedAt, memo version, polish

albanm
and
claude
committed

Commits on Jun 5, 2026

Commits on Jun 9, 2026