phylum-dev / vuln-reach

A library for building tools to determine if vulnerabilities are reachable in a code base.

https://phylum.io

phylum-dev/vuln-reach Issues

Error: called `Option::unwrap()` on a `None` value
Updated 6 months ago1
Consider handling duplicate main fields in package.json
Updated 7 months ago1
Configuration format not sufficient to resolve packages aliases
Updated 7 months ago
Error downloading packages
Updated 7 months ago1
Reachability analysis failed for jest-environment-jsdom@28.1.3 and tough-cookie@4.0.0
Updated 7 months ago8
Shorthand identifiers are not handled correctly
Updated a year ago
Dependency cycles at the package level are not handled
Updated a year ago
Review assumptions for `SymbolTableBuilder::root_scope` method
Closed a year ago
Validate whether kind check in `compute_paths` is redundant
Closed a year ago
Validate choice of `PathToExport` name in ES Modules
Closed a year ago
Reachability is incorrect for assignments
Closed a year ago
Fix variable declaration access graphs
Closed a year ago
Recognize dynamic function/closure definitions
Closed a year ago
Parameter identifier in `catch` clause ignored
Closed a year ago
Panic on packages with uncommon directory structure
Closed a year ago
Support multiple versions of the same package in a tree
Updated a year ago
Use expanded information in `VulnerableNode`
Closed a year ago
Add observability
Updated a year ago
Improve comments
Closed a year ago
Skip processing modules with parse errors
Closed a year ago
Move from assertions to `Result`
Closed a year ago
Failing assertion in topological sorting
Closed a year ago3
Symbol table fails to parse functions with comments between formal parameters and body
Closed a year ago
Expose packages in `PackageResolver`
Updated a year ago
Improve documentation
Updated a year ago
Research (2023.8)
Closed a year ago
Improve test coverage
Updated a year ago
Implement discovery for `Project`
Closed a year ago
Improve "access" concept
Updated a year ago
CommonJs is over-colored across packages
Updated a year ago
CommonJS reexports
Updated a year ago
Address `ts_node_parent` performance issues
Closed a year ago1
Improve representation of the `PathToExport` graph
Updated a year ago
Allow for multiple kinds of resolvers
Updated a year ago
Support `"imports"` field in `package.json`
Updated a year ago
Support `"exports"` field in `package.json`
Updated a year ago
Clarify license
Updated a year ago