{"_id":"@312npm/stack-reporter","_rev":"4-aa32531550bc0000afad8b71aad22ee3","name":"@312npm/stack-reporter","dist-tags":{"latest":"1.3.0"},"versions":{"1.0.0":{"name":"@312npm/stack-reporter","version":"1.0.0","keywords":["dependency","reporter","security","cve","vulnerability","monitoring"],"author":{"name":"312 Elements","email":"hello@312elements.com"},"license":"MIT","_id":"@312npm/stack-reporter@1.0.0","maintainers":[{"name":"312elements","email":"michael@312elements.com"}],"homepage":"https://seo.312elements.com","bin":{"stack-reporter":"bin/stack-reporter.cjs"},"dist":{"shasum":"c5b92f72c38475f25c8b931af4fbe9c0eae7ec1c","tarball":"https://registry.npmjs.org/@312npm/stack-reporter/-/stack-reporter-1.0.0.tgz","fileCount":5,"integrity":"sha512-j2Tc3z6Yf3FZSRo8w4hNecYTj+Y/AZDTcwG6mBfEdCh9DByd9do1OXi0Tdk3WhULdoUqDqyJa82bTKjvYi08HQ==","signatures":[{"sig":"MEUCICGQ/Pn1VHN1cpwl488F/3zvW/gZGo6WMPslJl5ysXwPAiEA6bMtXiFvrmQuZyAS95qqavGfUjNDsXk1TcZfq0gMJ3Y=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":12882},"engines":{"node":">=16"},"gitHead":"a4cae53a4e8aa663a0872ebddd8c780ed2aa1780","scripts":{"postinstall":"node ./bin/setup.cjs"},"_npmUser":{"name":"312elements","email":"michael@312elements.com"},"_npmVersion":"10.8.2","description":"Reports your project's dependency list to 312 Elements for nightly CVE scanning and email alerts","directories":{},"_nodeVersion":"20.19.4","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/stack-reporter_1.0.0_1772605403548_0.7190414078669636","host":"s3://npm-registry-packages-npm-production"}},"1.1.0":{"name":"@312npm/stack-reporter","version":"1.1.0","keywords":["dependency","reporter","security","cve","vulnerability","monitoring"],"author":{"name":"312 Elements","email":"hello@312elements.com"},"license":"MIT","_id":"@312npm/stack-reporter@1.1.0","maintainers":[{"name":"312elements","email":"michael@312elements.com"}],"homepage":"https://seo.312elements.com","bin":{"stack-reporter":"bin/stack-reporter.cjs"},"dist":{"shasum":"1a9c84b4129884318e9295c1efff486b7e693140","tarball":"https://registry.npmjs.org/@312npm/stack-reporter/-/stack-reporter-1.1.0.tgz","fileCount":5,"integrity":"sha512-abwa3ExAQhOCaZ8H5P2fVEAxa25nuQkg4r2jmONYrUNKKtYAl37OZwKsTi3yDR7wOJtfN+ACIRm9ijV32qK/vA==","signatures":[{"sig":"MEUCIQDm+xSbDRujq+kmRfLWZh0rk9RsGuhp+xCAUkW414NX9gIgdWJJy+wGxTNAvXQt9dI/5nCAF6QEoAh8ajEQHddNtjo=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":13709},"engines":{"node":">=16"},"gitHead":"88943df0d5ac72b09ca93757f025a2602fca0a73","scripts":{"postinstall":"node ./bin/setup.cjs"},"_npmUser":{"name":"312elements","email":"michael@312elements.com"},"_npmVersion":"10.8.2","description":"Reports your project's dependency list to 312 Elements for nightly CVE scanning and email alerts","directories":{},"_nodeVersion":"20.19.4","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/stack-reporter_1.1.0_1772648296925_0.7203858075324661","host":"s3://npm-registry-packages-npm-production"}},"1.2.0":{"name":"@312npm/stack-reporter","version":"1.2.0","keywords":["dependency","reporter","security","cve","vulnerability","monitoring"],"author":{"name":"312 Elements","email":"hello@312elements.com"},"license":"MIT","_id":"@312npm/stack-reporter@1.2.0","maintainers":[{"name":"312elements","email":"michael@312elements.com"}],"homepage":"https://seo.312elements.com","bugs":{"url":"https://github.com/mschachtjr/stack-reporter/issues"},"bin":{"stack-reporter":"bin/stack-reporter.cjs"},"dist":{"shasum":"e2906c84704fa8914a4cea93d9564e177e2104aa","tarball":"https://registry.npmjs.org/@312npm/stack-reporter/-/stack-reporter-1.2.0.tgz","fileCount":5,"integrity":"sha512-2GuCUW8AGx+8ccmWNL/FINN4MzXBRFGwFunzghyitvMuvWL7iRjL8pM6W4vlce3DuOndelFIdexTJESl8e2M8Q==","signatures":[{"sig":"MEQCICIT2MI/STdNs7JnlegqQtawgbgFQrX46/Wu46s0u2Q3AiB4lRCyJL6pTBd4scT4cxglVrUhNVsLADGGzQTFzu0dXA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":14337},"engines":{"node":">=16"},"gitHead":"6ae5e89fa97fbb794700d8ec5a2c2f73ecda1b9e","scripts":{"postinstall":"node ./bin/setup.cjs"},"_npmUser":{"name":"312elements","email":"michael@312elements.com"},"repository":{"url":"git+https://github.com/mschachtjr/stack-reporter.git","type":"git"},"_npmVersion":"11.11.1","description":"Continuous CVE monitoring for your npm dependencies — scans nightly and emails you when vulnerabilities are disclosed, even between deploys","directories":{},"_nodeVersion":"20.19.4","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/stack-reporter_1.2.0_1773501286941_0.44404621218778995","host":"s3://npm-registry-packages-npm-production"}},"1.3.0":{"name":"@312npm/stack-reporter","version":"1.3.0","description":"Continuous CVE monitoring for your npm dependencies — scans nightly and emails you when vulnerabilities are disclosed, even between deploys","license":"MIT","author":{"name":"312 Elements","email":"hello@312elements.com"},"homepage":"https://seo.312elements.com","repository":{"type":"git","url":"git+https://github.com/mschachtjr/stack-reporter.git"},"keywords":["dependency","reporter","security","cve","vulnerability","monitoring"],"bin":{"stack-reporter":"bin/stack-reporter.cjs"},"scripts":{"postinstall":"node ./bin/setup.cjs"},"engines":{"node":">=16"},"gitHead":"000ea7e22ca7f6331493cecb2d7b313a85a7bfb7","_id":"@312npm/stack-reporter@1.3.0","bugs":{"url":"https://github.com/mschachtjr/stack-reporter/issues"},"_nodeVersion":"20.19.4","_npmVersion":"11.11.1","dist":{"integrity":"sha512-6gACZwuT97UgUy7QaoP6NU/b0cREADniMXbHZcf1/Zz0OEUdW8juD5Gzjwu+zZGw1NnuOJlhY0SYLEywZUGZUg==","shasum":"e2f118ae981de04131e38f8ff386cd1848156499","tarball":"https://registry.npmjs.org/@312npm/stack-reporter/-/stack-reporter-1.3.0.tgz","fileCount":5,"unpackedSize":17210,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEQCIHfN2y2eyPFk+WPQDVGNxXc3vuvLqtXr9H7tX0b/sbpdAiAW39KHMv4ZRrFZYOBZu3P41YdPjh9SjUNEBoh1Vqd9mw=="}]},"_npmUser":{"name":"312elements","email":"michael@312elements.com"},"directories":{},"maintainers":[{"name":"312elements","email":"michael@312elements.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/stack-reporter_1.3.0_1773510598331_0.4987780669461932"},"_hasShrinkwrap":false}},"time":{"created":"2026-03-04T06:23:23.464Z","modified":"2026-03-14T17:49:58.598Z","1.0.0":"2026-03-04T06:23:23.717Z","1.1.0":"2026-03-04T18:18:17.092Z","1.2.0":"2026-03-14T15:14:47.103Z","1.3.0":"2026-03-14T17:49:58.480Z"},"bugs":{"url":"https://github.com/mschachtjr/stack-reporter/issues"},"author":{"name":"312 Elements","email":"hello@312elements.com"},"license":"MIT","homepage":"https://seo.312elements.com","keywords":["dependency","reporter","security","cve","vulnerability","monitoring"],"repository":{"type":"git","url":"git+https://github.com/mschachtjr/stack-reporter.git"},"description":"Continuous CVE monitoring for your npm dependencies — scans nightly and emails you when vulnerabilities are disclosed, even between deploys","maintainers":[{"name":"312elements","email":"michael@312elements.com"}],"readme":"# @312npm/stack-reporter\n\n## The problem\n\n`npm audit` only runs when you do — during installs or CI builds. Between deploys, new vulnerabilities are disclosed against packages already in your `node_modules`. Unless someone on your team remembers to check, you won't know until the next build, which could be days or weeks later. By then, the vulnerability may have been public long enough for active exploitation.\n\n## What this does\n\nThis package reports your dependency list to [312 Elements](https://seo.312elements.com) once per build. We then scan those dependencies against the [OSV.dev](https://osv.dev) vulnerability database **every night at 3 AM**. If a new CVE is disclosed against any package in your stack, you get an email with the affected package, severity, and fix — whether you deploy that day or not.\n\nThink of it as `npm audit` running on autopilot. Zero config, zero maintenance, zero risk to your build.\n\n## How it works\n\n1. **This package (client-side):** Reads your lock file and sends package names + versions to the 312 Elements API. No source code, secrets, or environment variables are transmitted. Always exits 0 — it will never break your build.\n\n2. **312 Elements (server-side):** Scans all reported dependencies nightly against the OSV.dev CVE database. If a vulnerability is found, you receive an email with the affected package, severity, and remediation steps.\n\n## Install\n\n```bash\nnpm install --save-dev @312npm/stack-reporter\n```\n\nAdd to your build command in `package.json`:\n\n```json\n{\n  \"scripts\": {\n    \"build\": \"stack-reporter && next build\"\n  }\n}\n```\n\n## Domain detection\n\nYour site's domain is detected automatically (no config needed):\n\n1. `BEACON_DOMAIN` environment variable (explicit override)\n2. `VERCEL_PROJECT_PRODUCTION_URL` (Vercel sets this automatically)\n3. `homepage` field in package.json\n\n## What gets sent\n\nOn each build, the script sends a JSON payload containing:\n- Your site's domain (auto-detected)\n- A list of dependencies: package name, version, ecosystem (npm), and dev/prod flag\n\nThat's it. No source code, no environment variables, no file contents.\n\n## Lock file support\n\n- `package-lock.json` (npm v1, v2, v3)\n- `yarn.lock` (classic)\n- `pnpm-lock.yaml` (detected, not yet parsed)\n\n## Requirements\n\n- Node.js >= 16\n- A 312 Elements account at [seo.312elements.com](https://seo.312elements.com)\n","readmeFilename":"README.md"}