OWASP CVE Lite CLI Graduates to Lab Project Status

# מהמקור

CVE Lite CLI, a fast open source dependency vulnerability scanner for JavaScript and TypeScript projects, has graduated to OWASP Lab Project status three months after its initial release. OWASP CVE Lite CLI graduated to Lab Project status in June 2026, recognized for clear documentation, active development, and growing adoption across open source and enterprise teams. The project launched in March 2026. What CVE Lite CLI does CVE Lite CLI scans lockfiles locally and matches dependencies against the OSV database to surface known vulnerabilities. It supports npm, pnpm, Yarn, and Bun lockfiles and classifies every finding as direct or transitive. Rather than stopping at detection, it generates a ranked remed