This product was not featured by Product Hunt yet. It will not be visible on their landing page and won't be ranked (cannot win product of the day regardless of upvotes).
CVE Lite CLI
Find JS/TS vulnerabilities and get exact fix commands
I built CVE Lite CLI out of a frustration I kept running into as a developer: every vulnerability scanner I used would tell me something was broken, then leave me to figure out what to actually do about it. You'd get a list of CVE IDs, maybe a severity rating, and then nothing. The fix was left as an exercise for the reader.
The other problem was timing. Most tools live in CI - by the time you see the result, you've already moved on to the next task. Context switching back to a dependency decision you made three hours ago is expensive, and most developers learn to ignore the alerts entirely.
So I built something different: a local scanner that reads your lockfile, matches it against OSV advisory data, and tells you the exact npm install, pnpm add, yarn upgrade, or bun add command to fix each finding - including for transitive dependencies buried three levels deep. It runs in under a second with no account and no cloud upload.
What started as a personal tool has grown into an OWASP Incubator Project with support for npm, pnpm, Yarn, and Bun; an offline advisory database for air-gapped environments; a ratcheting mode for teams with existing vulnerability debt; and a GitHub Action for CI integration.
If you try it:
npx cve-lite-cli . --report
I'd love to hear what you find.
No comment highlights available yet. Please check back later!
About CVE Lite CLI on Product Hunt
“Find JS/TS vulnerabilities and get exact fix commands”
CVE Lite CLI was submitted on Product Hunt and earned 5 upvotes and 1 comments, placing #145 on the daily leaderboard. CVE Lite CLI scans JS/TS lockfiles locally, explains direct and transitive dependency risk, and provides parent-aware remediation guidance.
CVE Lite CLI was featured in Open Source (68.6k followers), Developer Tools (515.4k followers), GitHub (41.3k followers) and Security (2.7k followers) on Product Hunt. Together, these topics include over 117.8k products, making this a competitive space to launch in.
Who hunted CVE Lite CLI?
CVE Lite CLI was hunted by Sonu Kapoor. A “hunter” on Product Hunt is the community member who submits a product to the platform — uploading the images, the link, and tagging the makers behind it. Hunters typically write the first comment explaining why a product is worth attention, and their followers are notified the moment they post. Around 79% of featured launches on Product Hunt are self-hunted by their makers, but a well-known hunter still acts as a signal of quality to the rest of the community. See the full all-time top hunters leaderboard to discover who is shaping the Product Hunt ecosystem.
Want to see how CVE Lite CLI stacked up against nearby launches in real time? Check out the live launch dashboard for upvote speed charts, proximity comparisons, and more analytics.
Sonu Kapoor