Skip to content

is-website-vulnerable

Vulnerability Scanning

finds publicly known security vulnerabilities in a website's frontend JavaScript libraries

Track releases GitHub
JavaScript Latest v1.14.15 · 17d ago Security brief →

Features

  • Scans a website's frontend JavaScript libraries for publicly known vulnerabilities
  • Provides CLI usage via npx or global npm install
  • Supports Docker container execution for isolated scans

Recent releases

View all 5 releases →
v1.14.12 Breaking risk

Minor fixes and improvements.

Full changelog

1.14.12 (2026-04-26)

Bug Fixes

  • Add publishConfig for package.json (#117) (2ca9aed)
  • Modify GitHub Actions workflow for release process (#116) (9feab08)
  • remove deprecated Snyk vulnerabilities badge from README (#114) (98b6372)
  • Remove ignore-engines flag from npm ci command (0ef0878)
View release on GitHub
v1.14.11 Bug fix

Added graceful error handling for Chrome process termination failures on Windows 11.

View release on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
2,028
Forks
127
Languages
JavaScript Dockerfile Shell
Downloads/week
1,169 ↑15%
NPM Maintainers
2
Contributors
24
View on GitHub View on npm

Install & Platforms

Install via
npm

Similar tools

Pompelmi
JSLike, a CSP-Safe Interpreter for JS, TS, JSX, TSX in JS
app-stormkit-io
Erodenn/fetch-guard
Hindsight

Beta — feedback welcome: [email protected]