# lirantal/is-website-vulnerable

finds publicly known security vulnerabilities in a website's frontend JavaScript libraries

Repository: https://github.com/lirantal/is-website-vulnerable
Canonical: https://ross.abutalabs.com/products/is-website-vulnerable
Language: JavaScript
License: Apache-2.0
License Family: permissive
Topics: security-vulnerabilities, security, vulnerabilities, lighthouse, scan, nodejs, hacktoberfest
Last push: 2026-08-07T11:42:40+00:00

## Health v2 (maintenance only)
Score: 97/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 96, release rhythm 96, longevity 100
- inputs: {"age_days": 2524, "days_push": 26, "days_rel": 26, "gap_med": 19, "n_releases_24m": 8}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2035, forks 128 (observed 2026-08-28T04:06:07.977032+00:00)

## What it is
A Node.js CLI tool that scans a website's frontend JavaScript libraries for publicly known security vulnerabilities using the Snyk database, powered by Lighthouse. It can be run via npx or Docker and reports findings with meaningful exit codes for CI integration.

## Use cases
- scan a website for vulnerable JavaScript libraries
- check if my site uses outdated JS packages with known CVEs
- audit frontend dependencies of a URL from the command line
- integrate frontend vulnerability scanning into CI pipelines
- detect vulnerable libraries like old jQuery versions on a site

## When to choose
- you need a quick one-off scan of a public website's frontend JS dependencies
- you want a CLI tool with JSON output and CI-friendly exit codes
- you prefer a zero-install scan via npx or Docker

## When to avoid
- you need to scan backend or server-side dependencies rather than frontend libraries
- you need deep static analysis of your own source code instead of a live URL scan
- you require authenticated or SPA-internal bundle scanning beyond what Lighthouse renders

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, vulnerability-scanning, cli, developer-tools
- domain: security, web-development, developer-tools
- platform: cli, cross-platform
- tags: snyk, lighthouse, frontend-security, javascript-libraries, audit, command-line, nodejs, docker

## Member repositories
- lirantal/is-website-vulnerable (main) score 97

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:06:07.977032+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:59:22.136261+00:00, confidence not recorded.
  - readme: https://github.com/lirantal/is-website-vulnerable (fetched 2026-08-28T04:06:07.977032+00:00, sha 989b7bc5ed29)
  - registry_npm: https://registry.npmjs.org/is-website-vulnerable (fetched 2026-08-29T10:39:02.725857+00:00, sha 9b3d13f0593e)
- Data as of 2026-08-30T08:39:29.467469+00:00.