{"_id":"fad-checker","_rev":"36-45ba86cb52db5e0079d4bf44d42858d0","name":"fad-checker","dist-tags":{"latest":"2.7.2"},"versions":{"1.0.0":{"name":"fad-checker","version":"1.0.0","author":{"name":"N8tz","email":"n8tz.js@gmail.com"},"license":"MIT","_id":"fad-checker@1.0.0","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"url":"https://github.com/N8tz","name":"N8tz"}],"bin":{"fad":"fad-check.js","fad-checker":"fad-check.js"},"dist":{"shasum":"42a5583ea930080a8f842cc23a7c13948793f484","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-1.0.0.tgz","fileCount":67,"integrity":"sha512-1jOHO4YnbagQjHbVeoUKzgESPFOiEHwH+oDbM8UAurpFIAvn6ZRcvUWYFGpjkZnmD3JO4v/FVgdw2xF/vl3sdA==","signatures":[{"sig":"MEUCIFsulVLO9WcPuJdKsaDmf17A3j/sm4pmboIo/gYggv9aAiEAnYe6+hC4JGnBq6dPMT1COQpsYpDOtnYtmTawmpsr/aI=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":383862},"engines":{"node":">=20"},"gitHead":"06051c1d36c3e9ed9e42d20f429969da4acb2dd6","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-check.js --compile --target=bun-windows-x64 --outfile=dist/fad-check.exe","build:linux":"bun build fad-check.js --compile --target=bun-linux-x64 --outfile=dist/fad-check-linux","build:macos":"bun build fad-check.js --compile --target=bun-darwin-x64 --outfile=dist/fad-check-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"_npmVersion":"11.9.0","description":"Fucking Autonomous Dependency Checker — multi-ecosystem CVE / EOL / outdated / vendored-JS scanner for Maven, npm and Yarn monorepos. Self-contained HTML + Word report.","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","p-limit":"^3.1.0","commander":"^14.0.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_1.0.0_1779442688976_0.3692086867384563","host":"s3://npm-registry-packages-npm-production"}},"1.0.1":{"name":"fad-checker","version":"1.0.1","author":{"name":"N8tz","email":"n8tz.js@gmail.com"},"license":"MIT","_id":"fad-checker@1.0.1","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"url":"https://github.com/N8tz","name":"N8tz"}],"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"46e82a6b3440e08f3b352e596cf599f0106daf8a","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-1.0.1.tgz","fileCount":67,"integrity":"sha512-YL2A50u0Q3eBvDHZzLKgVpkFLWjlo2l7RwlYQhDGQaZyeoDLSPPHKjWOsvT3ZIJkoPzXpoPlx077lSa2ehJEZA==","signatures":[{"sig":"MEQCIHQpyUYOlPjOBUENciQyCXq6wDOmCv1SSeO2evY5T6j7AiAr3ez6CT9DKPJ9uFlpvTArbsFwTF3m014BpyaKac/NiQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":384282},"engines":{"node":">=20"},"gitHead":"28addc369183f1d803c33b2bb107134e312bdd51","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"_npmVersion":"11.9.0","description":"Fucking Autonomous Dependency Checker — multi-ecosystem CVE / EOL / outdated / vendored-JS scanner for Maven, npm and Yarn monorepos. Self-contained HTML + Word report.","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","p-limit":"^3.1.0","commander":"^14.0.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_1.0.1_1779442964536_0.18032860648634697","host":"s3://npm-registry-packages-npm-production"}},"1.0.2":{"name":"fad-checker","version":"1.0.2","author":{"name":"N8tz","email":"n8tz.js@gmail.com"},"license":"MIT","_id":"fad-checker@1.0.2","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"url":"https://github.com/N8tz","name":"N8tz"}],"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"bda3761f140696dda99a4d700e4d15b45a442d32","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-1.0.2.tgz","fileCount":68,"integrity":"sha512-kM/XJGTvkLUniUZsVMPAamtozOSyGGhr42JJuXGqoMsxeXey1Mn0GBqtjWVEKhgtcTOtRA2ViyR0GPLko1faOA==","signatures":[{"sig":"MEQCIGGnxqHx+72M8fxEORwzpO4oDMoO3aMWj+SgVfnOdN+AAiB62G6vL+8xkZdTlL0S+lr84r6k5LFmkpuZq2JTRtWPlw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":414673},"engines":{"node":">=20"},"gitHead":"09ecfe1c999ed24568313444bfa860e7d5990fcb","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"_npmVersion":"11.9.0","description":"Fucking Autonomous Dependency Checker — multi-ecosystem CVE / EOL / outdated / vendored-JS scanner for Maven, npm and Yarn monorepos. Self-contained HTML + Word report.","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","p-limit":"^3.1.0","commander":"^14.0.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_1.0.2_1779447062495_0.8599336672986191","host":"s3://npm-registry-packages-npm-production"}},"1.0.3":{"name":"fad-checker","version":"1.0.3","author":{"name":"N8tz","email":"n8tz.js@gmail.com"},"license":"MIT","_id":"fad-checker@1.0.3","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"url":"https://github.com/N8tz","name":"N8tz"}],"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"94351137fe6fec5c4a925dfc6d2eda49b0425ba1","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-1.0.3.tgz","fileCount":67,"integrity":"sha512-Gk7Sco1allU1i3bPP9CHd1JclFn5zFY7kucD2upxWPLyQOLO95B+Ff2NRCK9JkNTjUKbFbftW5oXz5hsqvZgYg==","signatures":[{"sig":"MEUCIHZbS/INWq+kI6y/fiauRFly61bqg7T0H4s+nLbCX2y3AiEAy7VRCoCW78enP6fMw2h/VPoOWKHjfGElj8L58nfkg70=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":396299},"engines":{"node":">=20"},"gitHead":"09ecfe1c999ed24568313444bfa860e7d5990fcb","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"_npmVersion":"11.9.0","description":"Fucking Autonomous Dependency Checker — multi-ecosystem CVE / EOL / outdated / vendored-JS scanner for Maven, npm and Yarn monorepos. Self-contained HTML + Word report.","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","p-limit":"^3.1.0","commander":"^14.0.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_1.0.3_1779447906230_0.4591450123446934","host":"s3://npm-registry-packages-npm-production"}},"1.0.4":{"name":"fad-checker","version":"1.0.4","author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@1.0.4","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"6be71035029c25a33e9432b5b7cbe6be2b6b3cee","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-1.0.4.tgz","fileCount":68,"integrity":"sha512-Fi7UH/LFzxVNaVun+b7mre+f72bkkZvymsJtVWEMCuyrOyzuGpr6F/s6UuCU+ZAAPZbth7LyFQZluMLUUR/CaQ==","signatures":[{"sig":"MEUCIQC/99pdXJUddgqnctISYd6bI9z4oAe83+yGmITjJvFoBwIgCL5dch0A3S3GmU0vGp4FU0fGcGdDT7tyggwpzhdnNLY=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":426560},"engines":{"node":">=20"},"gitHead":"50c8ae7397acc5df22011f06ccd70c2a6e55ae05","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"_npmVersion":"11.9.0","description":"Fucking Autonomous Dependency Checker — multi-ecosystem CVE / EOL / outdated / vendored-JS scanner for Maven, npm and Yarn monorepos. Self-contained HTML + Word report.","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","p-limit":"^3.1.0","commander":"^14.0.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_1.0.4_1779458031679_0.10350639427882302","host":"s3://npm-registry-packages-npm-production"}},"1.0.5":{"name":"fad-checker","version":"1.0.5","author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@1.0.5","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/n8tz/fad-checker#readme","bugs":{"url":"https://github.com/n8tz/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"84734a0e7e34a2dbb68c7c3e1b19fa1faf8d5549","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-1.0.5.tgz","fileCount":71,"integrity":"sha512-hIDadV+n+MDMZYtJTdRgVVUnxprWGWZkax+bUEzdpdWdLZJYTGaqDOQ8AsqCzR2OMrjKIRhWh2QuPQ3E0eRAzw==","signatures":[{"sig":"MEYCIQDfkKlrwRGUV4l1d56X997dOs4i/b0+MlgHLLq1KseF9gIhALFjFAYkdedjkB56lslRruCOxSSTv80u0gVPuGCOP6s1","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":446305},"engines":{"node":">=20"},"gitHead":"e6557c815b1bd7481bdf316f7f3f4570ef8dd8e3","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/n8tz/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Fucking Autonomous Dependency Checker — Scans ALL pom/bom, npm/Yarn stuff and vendored JavaScript in a source tree, deal with private deps, multi modules & produces 1 HTML/DOC report with CVE, EOL, obsolete, outdated deps & fix recos","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","p-limit":"^3.1.0","commander":"^14.0.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_1.0.5_1779777965340_0.1126098043957584","host":"s3://npm-registry-packages-npm-production"}},"1.0.6":{"name":"fad-checker","version":"1.0.6","author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@1.0.6","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/n8tz/fad-checker#readme","bugs":{"url":"https://github.com/n8tz/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"2fd8acc265fe38ce0cc3843ef0deb267de34a231","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-1.0.6.tgz","fileCount":71,"integrity":"sha512-aanAA8lgSAA0WUeGMwCl6QIHpoqlZhG+hkuIoN65OckFAkKPyK4hEiBkvfuGfTe1advdkSNx2hulcXDmUNsShQ==","signatures":[{"sig":"MEYCIQDrlR+a6nSVlRVwA6iEVjGiIV44ZI1c7bM+eLdntR/LVwIhAKtJVtTbP9xH7pUabo1i5c8pyFLU+s9JbaKuMWHai/xL","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":454598},"engines":{"node":">=20"},"gitHead":"d02fecf07f8ca87fee3eb92314149a55719b7a44","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/n8tz/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Fucking Autonomous Dependency Checker — Scans ALL pom/bom, npm/Yarn stuff and vendored JavaScript in a source tree, deal with private deps, multi modules & produces 1 HTML/DOC report with CVE, EOL, obsolete, outdated deps & fix recos","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","p-limit":"^3.1.0","commander":"^14.0.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_1.0.6_1779786606298_0.698745665251367","host":"s3://npm-registry-packages-npm-production"}},"2.0.0":{"name":"fad-checker","version":"2.0.0","author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.0.0","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/n8tz/fad-checker#readme","bugs":{"url":"https://github.com/n8tz/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"01af3cff4a33682a4bd59fc91c139eb476676001","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.0.0.tgz","fileCount":119,"integrity":"sha512-3Bk5i/5DT6XfA+u3fHy9nAE3jFuCuZaqmBPRJ26gemiGtIxXSLz6IOCcUokKDWAKwfPpPjLwhSUfsmwWVvwHSw==","signatures":[{"sig":"MEUCIQDJtX66Fu/dw9RcflgZv/exItzt1+370146/MemPtpO1AIgdx4d43Ge+5ZhLN1ubfoYItD6SQMAeR94kH5hD8WvY9s=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":663305},"engines":{"node":">=20"},"gitHead":"99c277bd0f2be8a93301f77970f8e0ced486b00e","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/n8tz/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Scans ALL Maven, npm, Yarn, Composer, Python, C#/.NET in a source tree ONE SHOT Alone like a big boy, deal with private deps, multi mvn modules, EOL, obsolete, outdated deps & give fix recos","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","p-limit":"^3.1.0","commander":"^14.0.1","smol-toml":"^1.6.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.0.0_1780068426117_0.8665066240342263","host":"s3://npm-registry-packages-npm-production"}},"2.0.1":{"name":"fad-checker","version":"2.0.1","author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.0.1","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/n8tz/fad-checker#readme","bugs":{"url":"https://github.com/n8tz/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"15c2ff3f94893067aace289408af664e5b62d6d4","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.0.1.tgz","fileCount":49,"integrity":"sha512-aXBJb+awnaLv0BwZLlsHW26xLslCbJBg3SUHqlEHc2EvokshhfVrHlbYhMuiu4fJ1DTHOXCEZUedr6Fb7fTXdA==","signatures":[{"sig":"MEQCIF9FiiyeNWygXa4CwlTvS3afkeRUrxHWpNgRzYGOC+U4AiAbMePeoj06Bi4v3bBSKnRJTpC64baGoF+eSXOMqcHR6A==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":417496},"engines":{"node":">=20"},"gitHead":"54ffdf91b4439c659ffcea54a5bb291d3848130f","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/n8tz/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Scan ALL Maven, npm, Yarn, Composer, Python & C#/.NET dependencies in a source tree ONE SHOT without mvn/python/etc, deal with private deps, multi mvn modules, EOL, obsolete, outdated deps & give fix recos","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","js-yaml":"^4.1.1","p-limit":"^3.1.0","commander":"^14.0.1","smol-toml":"^1.6.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.0.1_1780128973090_0.7458995081635744","host":"s3://npm-registry-packages-npm-production"}},"2.1.0":{"name":"fad-checker","version":"2.1.0","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","passi","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli"],"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.1.0","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/n8tz/fad-checker#readme","bugs":{"url":"https://github.com/n8tz/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"37c220a819f8d6fa94adedc0de8cc00a3342a6a7","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.1.0.tgz","fileCount":71,"integrity":"sha512-BsOjNj4kgPRv6CUcGO6fTHg1GvqRG0+gWFdBfS5Hx8kqRvJiji+2TdMptz2nfftb+uk2MxJG9SyYwJxUSx6lhQ==","signatures":[{"sig":"MEYCIQCyO+cnupq8a5V6RAd4rlW2uCRB1hrDNELGAwsX9goTNwIhAJGuTrpr8p82m9JyV9zGQm1yFO6WLc+YHDmf/+l2KUT2","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":656875},"engines":{"node":">=20"},"gitHead":"4d920a48bc2dc54edf66623db07fa27da61de7c8","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/n8tz/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Scan ALL Maven, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSAF/SARIF/","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","js-yaml":"^4.1.1","p-limit":"^3.1.0","commander":"^14.0.1","smol-toml":"^1.6.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.1.0_1780316287106_0.3431258248922566","host":"s3://npm-registry-packages-npm-production"}},"2.1.1":{"name":"fad-checker","version":"2.1.1","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","passi","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli"],"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.1.1","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/n8tz/fad-checker#readme","bugs":{"url":"https://github.com/n8tz/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"4d47f25bb60876574f14ac6672eb9a1a06b5ef1c","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.1.1.tgz","fileCount":71,"integrity":"sha512-msEmuhOrP2Dpog41JThnX07X9RuZd56kJJc4lbONmlJL1hBEFX8egtEOo6L1IsarELvxmIIEtaxcpCiZ6OIExg==","signatures":[{"sig":"MEUCIQCzjC/DnnIz33wZN8OyOKqxkUoIjK1RPhfyTtcOKaATwwIgI4/jBJg+lzdCIkVzoDLRGxBIAvNzw4v4eIcN16d7KMc=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":656816},"engines":{"node":">=20"},"gitHead":"4d920a48bc2dc54edf66623db07fa27da61de7c8","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/n8tz/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Scan ALL Maven, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSAF/SARIF/","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","js-yaml":"^4.1.1","p-limit":"^3.1.0","commander":"^14.0.1","smol-toml":"^1.6.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.1.1_1780316660317_0.5783025628268115","host":"s3://npm-registry-packages-npm-production"}},"2.1.2":{"name":"fad-checker","version":"2.1.2","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","passi","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli"],"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.1.2","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/n8tz/fad-checker#readme","bugs":{"url":"https://github.com/n8tz/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"1ac096321faed7946742f82d59ef4dc46c957461","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.1.2.tgz","fileCount":72,"integrity":"sha512-gFrkTHfVuu8ewu+YcWGjukt3PpHZgaclJZ055Q2RD+B0Jxm0w0tizCvEks4FQnvhC2iMvhCoXUijRfDsm5sOVQ==","signatures":[{"sig":"MEQCIHZkb7qvFAlUVKiIswYXy/eUL7q//0dyh8Kecj8N0wcoAiAOmZmmmYwk43RNXrn/hlbybhdUFYbshnilj1hNn2i2Ww==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":807222},"engines":{"node":">=20"},"gitHead":"f3f38bb5aa7dfca72917daafc0b2093eccc3de0b","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/n8tz/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Scan ALL Maven, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSAF/SARIF/","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","js-yaml":"^4.1.1","p-limit":"^3.1.0","commander":"^14.0.1","smol-toml":"^1.6.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.1.2_1780395157585_0.6860528515007946","host":"s3://npm-registry-packages-npm-production"}},"2.2.0":{"name":"fad-checker","version":"2.2.0","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","passi","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli"],"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.2.0","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/n8tz/fad-checker#readme","bugs":{"url":"https://github.com/n8tz/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"6098ff2775ed012dc4a9accd36ef72ae05732a2e","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.2.0.tgz","fileCount":80,"integrity":"sha512-yuhApSFaIMHMVOIMlLNS7uRSnb856Jtzh9gNtsbcpOtWZsdUqPSxClgguGFG5gzMZiKsIlm097atEdGsldSEMw==","signatures":[{"sig":"MEQCIHCXVR0MKujK4d0g9OPm8HoMeZwLsOL4npFMxSWiPr4hAiBKENxsFnJyKnnpOzq95sgZNvyJ29j2F/gwFHXshhQMAg==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":864755},"engines":{"node":">=20"},"gitHead":"c0c9281f256f9e65d6d93d4b6cc0cb9c9c7887c7","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/n8tz/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Scan ALL Maven, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSAF/SARIF/","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","js-yaml":"^4.1.1","p-limit":"^3.1.0","commander":"^14.0.1","smol-toml":"^1.6.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.2.0_1780482984053_0.005130478127592486","host":"s3://npm-registry-packages-npm-production"}},"2.2.1":{"name":"fad-checker","version":"2.2.1","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","passi","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli"],"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.2.1","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/n8tz/fad-checker#readme","bugs":{"url":"https://github.com/n8tz/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"40fe53613294c88be5bc64379f50d7782b38b1c8","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.2.1.tgz","fileCount":81,"integrity":"sha512-WrR166Rbv5GI+PtJiECHtLvKxkJFEm5nE3zgH8n4QwwQAtFStfsRxbAk5W8neSgkMyem5HAVQ8kJDTPHsh7sfw==","signatures":[{"sig":"MEYCIQCU4Cx/ayyGqm3xjpDOvkPifyInuGfuMEh5S+wzBM1J2wIhANaZs+KQ+dE5f2lJ5cXUuRe26LGvxZP3fRoo3eWlkCaA","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":869434},"engines":{"node":">=20"},"gitHead":"5c3c4b762cd4622181ea1a9219f0c6aa042eada5","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/n8tz/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Scan ALL Maven, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSAF/SARIF/","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","js-yaml":"^4.1.1","p-limit":"^3.1.0","commander":"^14.0.1","smol-toml":"^1.6.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.2.1_1780558301954_0.40707095413856575","host":"s3://npm-registry-packages-npm-production"}},"2.2.2":{"name":"fad-checker","version":"2.2.2","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","passi","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli"],"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.2.2","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/n8tz/fad-checker#readme","bugs":{"url":"https://github.com/n8tz/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"887f82d9b198570edc614b97058d5bd8b552347d","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.2.2.tgz","fileCount":82,"integrity":"sha512-mAVMego+X8OSSAwx4Bv4mOoqozwf0nMlBd+hp+tBDZjiEkeKvBTk/QRzAQrxbwi5to8vuwZdAVGamdgvbv+VZA==","signatures":[{"sig":"MEYCIQDW92zPnqoV6lBk1DTFLFZiEtHZiHoKxOByN9ChrIn4OAIhAKMzxrQ/kxCGGrAZ1XEAYSC7sCwuXMEDxDFj5N5IZkVB","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":639122},"engines":{"node":">=20"},"gitHead":"8d4aceb4397bf4a8cd098ad8168dd91f28f98449","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/n8tz/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Scan ALL Maven, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSAF/SARIF/","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","js-yaml":"^4.1.1","p-limit":"^3.1.0","commander":"^14.0.1","smol-toml":"^1.6.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.2.2_1780567085213_0.6066715508736971","host":"s3://npm-registry-packages-npm-production"}},"2.2.3":{"name":"fad-checker","version":"2.2.3","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","passi","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli"],"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.2.3","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/n8tz/fad-checker#readme","bugs":{"url":"https://github.com/n8tz/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"78c6d1764f7d4b6c4f69efbd258f81bb07dfa35d","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.2.3.tgz","fileCount":87,"integrity":"sha512-lK2mPtLUp2DQDTeU6wBMjUIzkMFeM4SUghPKTMn3/453r2HKzvALY8zwnv+bS3xpCx+eZP6IfH+yxw+K+bPe8Q==","signatures":[{"sig":"MEYCIQCLCtegUFChPr981kiG/WPffXFInxRKutnuCUUNUBxG1wIhAN1gZ1CWUxkuQ2Lm0nPwbk2IElfvMF7IoXOGvrYdgQ+R","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":3140383},"engines":{"node":">=20"},"gitHead":"afe850689812a3a1a95b53a2766da09f7bc07dd7","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/n8tz/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Scan ALL Maven, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSAF/SARIF/","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","js-yaml":"^4.1.1","p-limit":"^3.1.0","commander":"^14.0.1","smol-toml":"^1.6.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.2.3_1780575584045_0.6327124040241656","host":"s3://npm-registry-packages-npm-production"}},"2.2.4":{"name":"fad-checker","version":"2.2.4","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","passi","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli"],"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.2.4","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/n8tz/fad-checker#readme","bugs":{"url":"https://github.com/n8tz/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"b3ddf2ea85d4d5f2b8dcf31335eeb6aaf5e7a054","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.2.4.tgz","fileCount":86,"integrity":"sha512-GMa8B4nkBuj03d2rkYlaTVKJc06CQIWdUQU0UGulU0NIlD1eDKozHZFNXBxEpQriWZ7q24L8xU9a8Y8dZDls0w==","signatures":[{"sig":"MEUCICKbFZZCrb4M5sTTpeRxhfY8yKQTGixhrxFMUry7k7JqAiEAt+FbiFkN0Q9chtv5N/hF5i2uEebMOfdcwJSHp0lBYbE=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":668981},"engines":{"node":">=20"},"gitHead":"ad78da17c2304bfaba549716a06d562b03b76a60","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/n8tz/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Scan ALL Maven, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSAF/SARIF/","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","js-yaml":"^4.1.1","p-limit":"^3.1.0","commander":"^14.0.1","smol-toml":"^1.6.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.2.4_1780644502507_0.8243942958200485","host":"s3://npm-registry-packages-npm-production"}},"2.3.0":{"name":"fad-checker","version":"2.3.0","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli"],"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.3.0","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/n8tz/fad-checker#readme","bugs":{"url":"https://github.com/n8tz/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"5c5b4e67a506fdec14c37698004e223d2807650b","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.3.0.tgz","fileCount":89,"integrity":"sha512-CApbKMDNgGzsa3zUC8y38EQrcUG4cjJK6Y3oZVHhvVCn6lvY+G3XagOhDAn32cY9Og56PdohvFx6Nf9p52Ag3g==","signatures":[{"sig":"MEYCIQDaH1cDyJuBK6AA7czw0UxJ7w6yTEkqBUmbEKT8C6TmFAIhAKVvV2mMcvyTvgB4n1/H51LLsaWHLeinx6yIYGKhcZcc","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":702948},"engines":{"node":">=20"},"gitHead":"e3634073af29a96451183812b904f917638c6de3","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/n8tz/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Scan ALL Maven, Gradle, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSA","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","js-yaml":"^4.1.1","p-limit":"^3.1.0","commander":"^14.0.1","smol-toml":"^1.6.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.3.0_1781534278349_0.9309357543901022","host":"s3://npm-registry-packages-npm-production"}},"2.3.1":{"name":"fad-checker","version":"2.3.1","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli"],"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.3.1","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/9pings/fad-checker#readme","bugs":{"url":"https://github.com/9pings/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"7c2de6c6b96ed94891e49601cf7b7b4823e05af9","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.3.1.tgz","fileCount":89,"integrity":"sha512-Sq2nN7ARMXh+4I+k80r1YZyF2wH73d6RDwzxJjjP8h8QexP6XViQH/fxEanZxlIHhmxi4CFd9yHroJ2vusKEiw==","signatures":[{"sig":"MEQCIDvU92cUxN5vSilW1krtstaB6UTANGK9El4+pVvGu1RrAiBwt+9YM62fmjX01YIFiDpSSAjEf/1CWvVcvst//6prVQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":704320},"engines":{"node":">=20"},"gitHead":"e5a49db99c8c02550bb33c1bf9a5eb746600a1ca","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/9pings/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Scan ALL Maven, Gradle, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSA","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","js-yaml":"^4.1.1","p-limit":"^3.1.0","commander":"^14.0.1","smol-toml":"^1.6.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.3.1_1781535371354_0.8695411821032395","host":"s3://npm-registry-packages-npm-production"}},"2.3.2":{"name":"fad-checker","version":"2.3.2","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli"],"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.3.2","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/9pings/fad-checker#readme","bugs":{"url":"https://github.com/9pings/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"96bbce2df7226170d757e10e625a6b79d7a7906c","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.3.2.tgz","fileCount":89,"integrity":"sha512-wcscoa6eisaZHnjuuwnwY+UsA9nOiPUqsiN6iZqhdRP2qIBF80/YFJgmkpmQU9SiZx2pZEeCUrAH0tJeBhSi7A==","signatures":[{"sig":"MEYCIQDTTa4YX4pmGg8LFKEq8uDn2anpY1vHipo9O+YfN2XRiQIhAMLgeqZfOppen4tvRVbYnExGYzX2igv4BJertYDcWIfT","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":717057},"engines":{"node":">=20"},"gitHead":"e5a49db99c8c02550bb33c1bf9a5eb746600a1ca","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/9pings/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Scan ALL Maven, Gradle, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSA","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","js-yaml":"^4.1.1","p-limit":"^3.1.0","commander":"^14.0.1","smol-toml":"^1.6.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.3.2_1781589144973_0.8294477907682776","host":"s3://npm-registry-packages-npm-production"}},"2.4.0":{"name":"fad-checker","version":"2.4.0","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli"],"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.4.0","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/9pings/fad-checker#readme","bugs":{"url":"https://github.com/9pings/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"528b3766421f824278085b2fd6b9be6902ac677a","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.4.0.tgz","fileCount":92,"integrity":"sha512-UjV8n/faMejgL934nvzeybhA/hoEDZBb7QsIJb8KZOULSm5sQlGMak1kmywoo5ud1wMoLWQzhc0vwaEM77NwbA==","signatures":[{"sig":"MEQCIFAsENl2Fl8rEszEg1cfVUZrmEr3YbrT5GKJnQrkA5tVAiA/nSunh2+7M1C/OU0l9vD7RQa/2r/sBrfBOgNWl66FsQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":753467},"engines":{"node":">=20"},"gitHead":"6a28de22a5246c991197dd180896f37075bcfef6","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/9pings/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Scan ALL Maven, Gradle, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSA","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","js-yaml":"^4.1.1","p-limit":"^3.1.0","commander":"^14.0.1","smol-toml":"^1.6.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.4.0_1781779077901_0.7584162795366651","host":"s3://npm-registry-packages-npm-production"}},"2.4.1":{"name":"fad-checker","version":"2.4.1","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli"],"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.4.1","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/9pings/fad-checker#readme","bugs":{"url":"https://github.com/9pings/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"53f3f44bf17b59bdea17ef6fa38dbde81ce2f2f7","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.4.1.tgz","fileCount":92,"integrity":"sha512-jSI009gtS2mv+5FW+Y60/t5gCYTAmTWMtJYJWXMxKz7fPaWIs977vywp+TxFnYtQaMNVX9C/8h2usi+fM/U/Hg==","signatures":[{"sig":"MEUCIQCWWmuhGnZC5ZnrP33Q79TvpnwRLBPXbTr3+qrX0xNWjwIgM4Noj2KAbdzff0SIiS9rVGWDGxF/uwxDY2iJT4BJBsg=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":755068},"engines":{"node":">=20"},"gitHead":"f8496f0a658b20248dafd92d36af62db3ab4e9c7","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/9pings/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Scan ALL Maven, Gradle, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSA","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","js-yaml":"^4.1.1","p-limit":"^3.1.0","commander":"^14.0.1","smol-toml":"^1.6.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.4.1_1781784573898_0.25825773298403076","host":"s3://npm-registry-packages-npm-production"}},"2.4.2":{"name":"fad-checker","version":"2.4.2","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli"],"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.4.2","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/9pings/fad-checker#readme","bugs":{"url":"https://github.com/9pings/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"febeeb23ebc7685fbe0acb88c13c0afa19820fb5","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.4.2.tgz","fileCount":97,"integrity":"sha512-zWFx8ZgicfwQ0CKoTo265msDEeMwuEW/aAZKWYosVKLJ+feAqIpHRpZc27n+acaVxgkY5/GOwVRBHX/44ZAO0g==","signatures":[{"sig":"MEUCIQD2egILqsqluc+n5miRC0165QqwuKWUBv8jGPOK1uxoLAIgEnZH632Ex9gYeG9uvQhGxib0jFCyuUTUoUshDStfLGQ=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":814141},"engines":{"node":">=20"},"gitHead":"3823bca77890dfc337a21c2846c8d80c1ef2429c","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/9pings/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Scan ALL Maven, Gradle, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSA","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","js-yaml":"^4.1.1","p-limit":"^3.1.0","commander":"^14.0.1","smol-toml":"^1.6.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.4.2_1782996413481_0.0413304981934306","host":"s3://npm-registry-packages-npm-production"}},"2.4.3":{"name":"fad-checker","version":"2.4.3","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli"],"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.4.3","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/9pings/fad-checker#readme","bugs":{"url":"https://github.com/9pings/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"bb0f3c384235beed13cac147ae05eb5a725cfc57","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.4.3.tgz","fileCount":96,"integrity":"sha512-q+M0mPmZbn+lWrauhzmsFjZkXjyReHdyj2RzQb5ww4MlBt0n6lqQw8Of9G63ghw11HwnFkudZ6OKYT2qyRzx/Q==","signatures":[{"sig":"MEUCIGcj7p9nXHTwWt9ZSjFqiZ3teoelGgnhQeFeZ918hPJcAiEA94uGj1cIj7gx/xOKGdybBcEOsmHua+Trc51iGjLQKZk=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":813515},"engines":{"node":">=20"},"gitHead":"c2b1dd7964f422b9488eea963b1097a9c344c833","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/9pings/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Scan ALL Maven, Gradle, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSA","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","js-yaml":"^4.1.1","p-limit":"^3.1.0","commander":"^14.0.1","smol-toml":"^1.6.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.4.3_1783509801180_0.14136831315585408","host":"s3://npm-registry-packages-npm-production"}},"2.4.4":{"name":"fad-checker","version":"2.4.4","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli"],"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.4.4","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/9pings/fad-checker#readme","bugs":{"url":"https://github.com/9pings/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"8f73c71a456e272e8df1628e7b5ee2a0e6595898","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.4.4.tgz","fileCount":97,"integrity":"sha512-2074xGCfb/6jU4rhxrWMIgQFGI016Bo2DfxBtRt1S6Tbp+cZWBLV7TxZlQ/mAFDi7AC164VSpWeCIFuwGOc2Ug==","signatures":[{"sig":"MEUCIQC9PYLri0q3iTT7ifrhi8VxVMbvY1gwSuObmu2RWUCDwgIgalIzdLk8LwdORzajZBIrJu1sh8C7Uxh+Jf/paeD36Ic=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":820211},"engines":{"node":">=20"},"gitHead":"a28f41e5e321cbeea1d666c65df4ec58352678f5","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/9pings/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Scan ALL Maven, Gradle, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSA","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","js-yaml":"^4.1.1","p-limit":"^3.1.0","commander":"^14.0.1","smol-toml":"^1.6.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.4.4_1784286868754_0.49995430643724514","host":"s3://npm-registry-packages-npm-production"}},"2.4.5":{"name":"fad-checker","version":"2.4.5","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli"],"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.4.5","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/9pings/fad-checker#readme","bugs":{"url":"https://github.com/9pings/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"32b4decf6495f66a7fef9e5aa2edcdced3a98494","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.4.5.tgz","fileCount":101,"integrity":"sha512-RCNx6R7GQznoNJQ40X6vFlPP3OkbD3LQUvl3h686Cr0n+UrigXnfFIGuPpMFLXY9zVqlmemxFQBfLTL7aanODQ==","signatures":[{"sig":"MEYCIQDU/l0mnca856S+naq43gmuqULM1eMTpm9NE/3r8Zw0KgIhAPEvsJitX+dOVuvYCdeCUVIERr2816q1IhsR3oo591iZ","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":865591},"engines":{"node":">=20"},"gitHead":"495a6939a11e7a2b90cedf6f17ffdb74484c618c","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/9pings/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Scan ALL Maven, Gradle, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSA","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","js-yaml":"^4.1.1","p-limit":"^3.1.0","commander":"^14.0.1","smol-toml":"^1.6.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.4.5_1784710971666_0.7176172697589838","host":"s3://npm-registry-packages-npm-production"}},"2.4.6":{"name":"fad-checker","version":"2.4.6","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli"],"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.4.6","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/9pings/fad-checker#readme","bugs":{"url":"https://github.com/9pings/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"2c4c26a2622249302b2b13d2670a65c069b3e78b","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.4.6.tgz","fileCount":101,"integrity":"sha512-kc/OCiBncmGJiC7IBnJaHWCl2Y0L5xvPDyU30KIWWfyTTn4qIJaTzJHCTYoGQoNfOmMiU1pVOQKKfGFfJmOQIw==","signatures":[{"sig":"MEUCIAaS2lYTL5qsgbYx+TVsymEvgrV49Net9PMabueCJ96fAiEA5XUc46yHy2fdRW07+RhH5xUfT9lrVCJebS1JuXPdgvo=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":866457},"engines":{"node":">=20"},"gitHead":"e0de5052b30b48b02ed5275ed02d142fc9b09a99","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/9pings/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Scan ALL Maven, Gradle, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSA","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.4.2","rimraf":"^6.0.1","xml2js":"^0.6.2","js-yaml":"^4.1.1","p-limit":"^3.1.0","commander":"^14.0.1","smol-toml":"^1.6.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.4.6_1784721760577_0.4212812180835257","host":"s3://npm-registry-packages-npm-production"}},"2.4.7":{"name":"fad-checker","version":"2.4.7","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli"],"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.4.7","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/9pings/fad-checker#readme","bugs":{"url":"https://github.com/9pings/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"1e4b63ca86d1cada19551bbd1d66792dbb283be0","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.4.7.tgz","fileCount":101,"integrity":"sha512-nK6/4Jt7ntHl5GwiMJXeoOR7B12yhS0LK4F5ui94L3hf//IAYPDh3qgQ9LCorOTxpJ/io/lAth23F8erO5lb+A==","signatures":[{"sig":"MEUCIQDVnBG6FNSzRSlQ+bBvtd4WqUkqQ56sDayELHuutzHnqQIgfkWaP/wumYpjLurkffo/cNkVRWu+eKVZZKE0QGFzdkY=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":870179},"engines":{"node":">=20"},"gitHead":"db241fc1b72a6740a2fe36f60d7f1ef393c88dee","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/9pings/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Scan ALL Maven, Gradle, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSA","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.7.0","rimraf":"^6.1.3","xml2js":"^0.6.2","js-yaml":"^4.3.2","p-limit":"^3.1.0","commander":"^14.0.3","minimatch":"^10.2.6","smol-toml":"^1.8.0"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.4.7_1787993261487_0.6254964539923142","host":"s3://npm-registry-packages-npm-production"}},"2.4.8":{"name":"fad-checker","version":"2.4.8","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli"],"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.4.8","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/9pings/fad-checker#readme","bugs":{"url":"https://github.com/9pings/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"be5cfed7a534b9e1e18185c4f3e289e3520705b9","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.4.8.tgz","fileCount":105,"integrity":"sha512-1XQbt8cH+jcIVzzc/twAozIoy+ebxdViP+mCQmqmZZgzisxTD6mpCdFIskqTArB9DZs7qyw/dk+4pT4zKHU6tQ==","signatures":[{"sig":"MEQCIGW1l1GLNJZUmQqwM1/QmUmGPR6jNfkAg4Pn++cUdP0FAiBkFTDUwXgi0csWMwo3WZKN1pABJvS9ZfmbK1kZwOPklg==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEQCIApiZ8jK9tlrFXKnWylvZ2Sy6de6wQjqxSsZ3uJ2pPUPAiAiEb9eN49wmmNozgUDTcwJcOKGu8U67reCBdCt/PDGEQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":916244},"engines":{"node":">=20"},"gitHead":"5d821fc2443f115df5bf77135c6c1274daf2a404","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker-linux","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/9pings/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Scan ALL Maven, Gradle, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSA","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.7.0","rimraf":"^6.1.3","xml2js":"^0.6.2","js-yaml":"^4.3.2","p-limit":"^3.1.0","commander":"^14.0.3","minimatch":"^10.2.6","smol-toml":"^1.8.0"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.4.8_1789385445064_0.5755749232298151","host":"s3://npm-registry-packages-npm-production"}},"2.4.9":{"name":"fad-checker","version":"2.4.9","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli"],"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.4.9","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/9pings/fad-checker#readme","bugs":{"url":"https://github.com/9pings/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"cfabcf8c8a9685275995398bcc9377a4706c791a","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.4.9.tgz","fileCount":104,"integrity":"sha512-QlduSlnNTKkyyY/q9OCEstFnfMjXgkY5jvWTbPuezraBmQE5YF//sEPVUJZ9uIeyBts4skG1Y/pznV4xieww5g==","signatures":[{"sig":"MEUCIQCHMwXlWVs2/UIkfSZEpqkRFxdr6VGa7VbIO6jbA+YnAwIgYVyIu4BcJfuuVc3uVqZnlrARzRJ5jpsNzrGviroWX3E=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEUCIH2+/r8V5wD8H+9sBVNG+0rZPTFpSALPkrxs6/vKV/TTAiEA8xqJNpWAz5jg03JdYBRiE7n54MD5bEAyV4ucVCwekVc=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":927094},"engines":{"node":">=20"},"gitHead":"883fee006bbfeb0f5241ba31bc9930f227b14abb","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/9pings/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Scan ALL Maven, Gradle, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSA","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.7.0","rimraf":"^6.1.3","xml2js":"^0.6.2","js-yaml":"^4.3.2","p-limit":"^3.1.0","commander":"^14.0.3","minimatch":"^10.2.6","smol-toml":"^1.8.0"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.4.9_1789714018796_0.22769596495315114","host":"s3://npm-registry-packages-npm-production"}},"2.5.0":{"name":"fad-checker","version":"2.5.0","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli"],"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.5.0","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/9pings/fad-checker#readme","bugs":{"url":"https://github.com/9pings/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"6389157bb2210b14b2ced8bbe4b093c97a0b91bc","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.5.0.tgz","fileCount":107,"integrity":"sha512-2Ny2PUEaVgaS0ysyd00X3ehXUpZDS2YVhXIoOerAB9GWjL06n+AbqEBWfHM1WA3uYRl/Zze6s1cjkoDHT+ebzg==","signatures":[{"sig":"MEUCIQD1HkjZj9I9VnodF8pYO+3UFlxYTYK084s9sJLgeOtXwwIgO6p3Pxjo5i8ZyOD6VxyD0SfWzy9mItmTx+6xTAhgom0=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEUCIQDMORNpyNbbZoudUMdgMfnXHFduaoifgOwd800/H9IIEwIgeQTBhlnz4S8BlHOymM9Y/ldUFDPdLH1tvSKAB9nO3DE=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":961846},"engines":{"node":">=20"},"gitHead":"8f114cbd9041c87db1ebed6d147467b68ba3932b","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/9pings/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Scan ALL Maven, Gradle, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSA","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.7.0","rimraf":"^6.1.3","xml2js":"^0.6.2","js-yaml":"^4.3.2","p-limit":"^3.1.0","commander":"^14.0.3","minimatch":"^10.2.6","smol-toml":"^1.8.0"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.5.0_1789724447200_0.8396389363947176","host":"s3://npm-registry-packages-npm-production"}},"2.5.1":{"name":"fad-checker","version":"2.5.1","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli"],"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.5.1","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/9pings/fad-checker#readme","bugs":{"url":"https://github.com/9pings/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"d58df3a917aee2a25734a2fbb25aad217e32353c","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.5.1.tgz","fileCount":107,"integrity":"sha512-je0br32NbofX0sRjs8Wh3BkdRazJBQTLEZ+MiTxkhkpNQSmd8KxLuZ/UmClTqUqohH6s47w5shJj5jfSDI3Nfw==","signatures":[{"sig":"MEYCIQCLgy4V5AjwUmvxs0VygNKmplPuymfk8ubL7kVeSYyP9gIhAPEBpRcsvKXpi9GBBLTFMYkxnPiXIC4e69xabNrZrjL3","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEUCIQDe+C0oV1az1lxh3wk0Y+TsJr2KTgQHJgBX+8+mYmZ0VgIgHP0pbjqTxr+XxiM1Zhlz4cQOPA7YSJqYD/HkESixkNQ=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":964082},"engines":{"node":">=20"},"gitHead":"bfb394001c85f29bead6c55441dc17271f84d340","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/9pings/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Scan ALL Maven, Gradle, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSA","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.7.0","rimraf":"^6.1.3","xml2js":"^0.6.2","js-yaml":"^4.3.2","p-limit":"^3.1.0","commander":"^14.0.3","minimatch":"^10.2.6","smol-toml":"^1.8.0"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.5.1_1789725744155_0.9852938149204156","host":"s3://npm-registry-packages-npm-production"}},"2.5.2":{"name":"fad-checker","version":"2.5.2","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli"],"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.5.2","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/9pings/fad-checker#readme","bugs":{"url":"https://github.com/9pings/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"2c0d92685be33797626bb657f0ba9c5259f02e15","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.5.2.tgz","fileCount":114,"integrity":"sha512-qlMNHwZSfv7XpHhdfsZs1hGOmTH5nWFOVl7Xwx55MEZw7J1g3zEKP81isje/z3kbEGVZWFltcl8PVEcMPUTz+Q==","signatures":[{"sig":"MEUCIQD02BepJXfKVlGLkck2jAMQqxY9Le8euP0JyWJMyEY4qwIgE9HEj3D+/TJvIbEGgGp4lSOmyZUPwVbGNIf71n00u5c=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEYCIQDkcdXp2ZAfQmy169XsnsW5sZKpu0tbOX2WpNkLAsZhmgIhAPNjd3SKu86bml6Seo0MDxt84bExfPfS/A5bkpWXfkaJ","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1111536},"engines":{"node":">=20"},"gitHead":"e36f69e0dd300c8b609494dbdffa500ea8cf5d55","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/9pings/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"Scan ALL Maven, Gradle, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSA","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.7.0","rimraf":"^6.1.3","xml2js":"^0.6.2","js-yaml":"^4.3.2","p-limit":"^3.1.0","commander":"^14.0.3","minimatch":"^10.2.6","smol-toml":"^1.8.0"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.5.2_1789826015892_0.4537551719433992","host":"s3://npm-registry-packages-npm-production"}},"2.7.0":{"name":"fad-checker","version":"2.7.0","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","xlsx","excel","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli","cms","framework","wordpress","drupal","symfony","laravel","joomla","prestashop","typo3","magento","spip","proxy-cache","code-audit","certificates","binary-analysis"],"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.7.0","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/9pings/fad-checker#readme","bugs":{"url":"https://github.com/9pings/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"236c10f00b5fa7c133bf4a4ebabe09a2762f21b9","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.7.0.tgz","fileCount":165,"integrity":"sha512-mHjYw2n+WLLGtZ574SVPpgNgy8wBY7sUUaxWgifdIZomf2IxX5zHIW7+RDoz3u+rJYHgC9FjHOZeLmNfaxanaw==","signatures":[{"sig":"MEYCIQCthyT9sPHZUduQbM+78921MmIfFicgLCgWdBKJoHFbtwIhAOarw7h8AZzm6e5/JJtIZAydT2DVP70Oi0y8pBvMlOw5","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEUCIQDNF2SEPpsgo/2hoge/IGqLnVB5+RtZZMFkvNyzvgxdZwIgTIbRvVFXlUO8Rk0tXJsQNCZ5Kdl6aOFvnM4ZgQzmSyE=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1536314},"engines":{"node":">=20"},"gitHead":"1e462b708ea507d9c5f52d457ac408b8c975ec98","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/9pings/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"One-shot polyglot dependency auditor (10 ecosystems + 9 CMS/Frameworks). No build tools. Real & complete air-gapped mode. Private deps, binaries, certs, EOL, CVE (KEV+EPSS) - Made for professional code audits.","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.7.0","rimraf":"^6.1.3","xml2js":"^0.6.2","js-yaml":"^4.3.2","p-limit":"^3.1.0","commander":"^14.0.3","minimatch":"^10.2.6","smol-toml":"^1.8.0"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.7.0_1790246386133_0.16777905408834726","host":"s3://npm-registry-packages-npm-production"}},"2.7.1":{"name":"fad-checker","version":"2.7.1","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","xlsx","excel","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli","cms","framework","wordpress","drupal","symfony","laravel","joomla","prestashop","typo3","magento","spip","proxy-cache","code-audit","certificates","binary-analysis"],"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","_id":"fad-checker@2.7.1","maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"homepage":"https://github.com/9pings/fad-checker#readme","bugs":{"url":"https://github.com/9pings/fad-checker/issues"},"bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"dist":{"shasum":"c30009a751d506cbac049e0e921df09a90bc6d6f","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.7.1.tgz","fileCount":165,"integrity":"sha512-8gm59g4t07kgS/rJ8WA0JIfL4kizW0B1oIZMDm/7iOwdoBbLXGDrGreb0Tr/EWXSd/0seGobTWuoLG16hhSMbw==","signatures":[{"sig":"MEUCIEoGpuzFX4XVJojfhCaIJmaczgk5Z/Hedt+UrslFRCJFAiEA9Fdyhwz913l6rkN7t4+tOBbomLZpmmj0tSjB2RMk+xQ=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEYCIQCMh3UOd+sSkHkP14RZCQGO99pA65sauAZ2z4jNSg2LaAIhAMpOxTA1ffsbBrPI4krevnxLR4pI3uaMq4NKfcO6c9Sq","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1528516},"engines":{"node":">=20"},"gitHead":"542cfda7f247530753eb5bcf1e7ed267c69a6864","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"repository":{"url":"git+https://github.com/9pings/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"One-shot polyglot dependency auditor (10 ecosystems + 9 CMS/Frameworks). No build tools. Real & complete air-gapped mode. Private deps, binaries, certs, EOL, CVE (KEV+EPSS) - Made for professional code audits.","directories":{},"_nodeVersion":"24.14.0","dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.7.0","rimraf":"^6.1.3","xml2js":"^0.6.2","js-yaml":"^4.3.2","p-limit":"^3.1.0","commander":"^14.0.3","minimatch":"^10.2.6","smol-toml":"^1.8.0"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/fad-checker_2.7.1_1790265392093_0.7209927813313013","host":"s3://npm-registry-packages-npm-production"}},"2.7.2":{"_id":"fad-checker@2.7.2","bin":{"fad":"fad-checker.js","fad-checker":"fad-checker.js"},"bugs":{"url":"https://github.com/9pings/fad-checker/issues"},"dist":{"shasum":"a91f3027e3ffb79a8003f9133559850ec265f6cd","tarball":"https://registry.npmjs.org/fad-checker/-/fad-checker-2.7.2.tgz","fileCount":165,"integrity":"sha512-nsl4cHKPX1VHEJXq3yJW0TzDY/1Kw8Bbm3Aq8sDh/JJJJ1aoX2XwUCPkQ/niSS3a3JkBaNcuWglTJfk1V/f9sg==","signatures":[{"sig":"MEUCIQCKh1OASa8xnVv+gxRijoiFwEM090Scxq14/IAx2RqOIwIgfYP8c4S8H7wQqUA6foBnkhlLc4GpQ/z+8ezFfDZFLcI=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEYCIQDXt6UCpcCluq9IXxDhtAUA3WlSGRy61vddHCoXvSGqZgIhAOP+q1h012vDIg3dYkqUGQOO1J8FGE95gMPRH5CtNQ2g"}],"unpackedSize":1531982},"name":"fad-checker","author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"engines":{"node":">=20"},"gitHead":"4fb4b48dd0c1c4141869811003e329728549cd6a","license":"MIT","scripts":{"test":"node --test test/*.test.js","build":"npm run build:linux && npm run build:win","build:win":"bun build fad-checker.js --compile --target=bun-windows-x64 --outfile=dist/fad-checker.exe","build:linux":"bun build fad-checker.js --compile --target=bun-linux-x64 --outfile=dist/fad-checker","build:macos":"bun build fad-checker.js --compile --target=bun-darwin-x64 --outfile=dist/fad-checker-macos"},"version":"2.7.2","_npmUser":{"name":"n8tz","email":"n8tz.js@gmail.com"},"homepage":"https://github.com/9pings/fad-checker#readme","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","xlsx","excel","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli","cms","framework","wordpress","drupal","symfony","laravel","joomla","prestashop","typo3","magento","spip","proxy-cache","code-audit","certificates","binary-analysis"],"repository":{"url":"git+https://github.com/9pings/fad-checker.git","type":"git"},"_npmVersion":"11.9.0","description":"One-shot polyglot dependency auditor (10 ecosystems + 9 CMS/Frameworks). No build tools. Real & complete air-gapped mode. Private deps, binaries, certs, EOL, CVE (KEV+EPSS) - Made for professional code audits.","directories":{},"maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"_nodeVersion":"24.14.0","contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"dependencies":{"chalk":"^4.1.2","fflate":"^0.8.3","retire":"^5.7.0","rimraf":"^6.1.3","xml2js":"^0.6.2","js-yaml":"^4.3.2","p-limit":"^3.1.0","commander":"^14.0.3","minimatch":"^10.2.6","smol-toml":"^1.8.0"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/fad-checker_2.7.2_1790270452294_0.3079605503356331"}}},"time":{"created":"2026-05-22T09:38:08.938Z","modified":"2026-09-24T17:20:52.585Z","1.0.0":"2026-05-22T09:38:09.128Z","1.0.1":"2026-05-22T09:42:44.708Z","1.0.2":"2026-05-22T10:51:02.726Z","1.0.3":"2026-05-22T11:05:06.416Z","1.0.4":"2026-05-22T13:53:51.881Z","1.0.5":"2026-05-26T06:46:05.494Z","1.0.6":"2026-05-26T09:10:06.455Z","2.0.0":"2026-05-29T15:27:06.316Z","2.0.1":"2026-05-30T08:16:13.249Z","2.1.0":"2026-06-01T12:18:07.335Z","2.1.1":"2026-06-01T12:24:20.509Z","2.1.2":"2026-06-02T10:12:37.835Z","2.2.0":"2026-06-03T10:36:24.198Z","2.2.1":"2026-06-04T07:31:42.145Z","2.2.2":"2026-06-04T09:58:05.388Z","2.2.3":"2026-06-04T12:19:44.241Z","2.2.4":"2026-06-05T07:28:22.664Z","2.3.0":"2026-06-15T14:37:58.514Z","2.3.1":"2026-06-15T14:56:11.543Z","2.3.2":"2026-06-16T05:52:25.154Z","2.4.0":"2026-06-18T10:37:58.115Z","2.4.1":"2026-06-18T12:09:34.113Z","2.4.2":"2026-07-02T12:46:53.623Z","2.4.3":"2026-07-08T11:23:21.394Z","2.4.4":"2026-07-17T11:14:28.911Z","2.4.5":"2026-07-22T09:02:51.856Z","2.4.6":"2026-07-22T12:02:40.774Z","2.4.7":"2026-08-29T08:47:41.629Z","2.4.8":"2026-09-14T11:30:45.146Z","2.4.9":"2026-09-18T06:46:59.571Z","2.5.0":"2026-09-18T09:40:47.311Z","2.5.1":"2026-09-18T10:02:24.256Z","2.5.2":"2026-09-19T13:53:35.986Z","2.7.0":"2026-09-24T10:39:46.225Z","2.7.1":"2026-09-24T15:56:32.218Z","2.7.2":"2026-09-24T17:20:52.417Z"},"bugs":{"url":"https://github.com/9pings/fad-checker/issues"},"author":{"name":"pp9Ping","email":"pp9Ping@gmail.com"},"license":"MIT","homepage":"https://github.com/9pings/fad-checker#readme","keywords":["sca","software-composition-analysis","dependency-scanner","vulnerability-scanner","security","cve","osv","nvd","epss","kev","cyclonedx","sbom","csaf","vex","sarif","xlsx","excel","license-compliance","eol","end-of-life","outdated","deprecated","audit","devsecops","appsec","supply-chain","offline","air-gapped","maven","npm","yarn","pnpm","composer","pypi","nuget","go","golang","ruby","rubygems","retirejs","polyglot","cli","cms","framework","wordpress","drupal","symfony","laravel","joomla","prestashop","typo3","magento","spip","proxy-cache","code-audit","certificates","binary-analysis"],"repository":{"url":"git+https://github.com/9pings/fad-checker.git","type":"git"},"description":"One-shot polyglot dependency auditor (10 ecosystems + 9 CMS/Frameworks). No build tools. Real & complete air-gapped mode. Private deps, binaries, certs, EOL, CVE (KEV+EPSS) - Made for professional code audits.","contributors":[{"name":"pp9Ping","email":"pp9Ping@gmail.com"}],"maintainers":[{"name":"n8tz","email":"n8tz.js@gmail.com"}],"readme":"# fad-checker\n\n[![npm version](https://img.shields.io/npm/v/fad-checker.svg)](https://www.npmjs.com/package/fad-checker)\n[![npm downloads](https://img.shields.io/npm/dm/fad-checker.svg)](https://www.npmjs.com/package/fad-checker)\n[![license](https://img.shields.io/npm/l/fad-checker.svg)](LICENSE)\n[![node](https://img.shields.io/node/v/fad-checker.svg)](https://nodejs.org)\n[![CI](https://github.com/9pings/fad-checker/actions/workflows/ci.yml/badge.svg)](https://github.com/9pings/fad-checker/actions/workflows/ci.yml)\n\n> **F**ormidable **A**uditor's **D**ependency **C**hecker<br>\n> AKA **F**uckin' **A**utonomous **D**ependency **C**hecker<br>\n\n`fad-checker` is a polyglot dependency auditor built for **professional code audits**.\n\n\nIt scans **10 ecosystems + 9 CMS/Frameworks** (WordPress, Drupal, Symfony, Laravel…) in one pass, with **no build tools**, **air-gapped** workflows using transferred caches, private package detection, committed binaries & certificates, then produces clean **HTML reports + json baseline + (DOC/XLSX/SARIF/CycloneDX/etc)** .\n\n🌐 **[Project site & docs →](https://9pings.github.io/fad-checker/)**\n\n> [!WARNING]\n> fad-checker is new and may still contain ( rare ) bugs. Treat its output as a strong first pass, **double-check anything critical**, and please [report issues](https://github.com/9pings/fad-checker/issues); they get fixed fast.\n\n<p align=\"center\"><img src=\"docs/assets/demo.gif\" alt=\"fad-checker animated terminal demo: an offline Maven audit — dependencies absent from Maven Central flagged as private/internal, the compact single-line vulnerability-database progress, then findings coloured by severity\" height=\"600\"></p>\n\n## Features\n\n- **10 ecosystems in one pass**; Maven, Gradle, npm/Yarn/pnpm, Composer, PyPI, NuGet, Go, Ruby — plus **vendored JS**, committed **native binaries** (identified by checksum) and **embedded JARs** (fat-jars/war/ear, opened in-memory).\n- **No build tools**; manifests and lockfiles are read off disk. No `mvn`/`gradle`/`npm install`/`pip`/`dotnet restore`/`go build`, no `node_modules/`. The Maven graph is resolved the way Maven resolves it. → [how](docs/COMPARISON.md#how-its-autonomous-no-build-tools)\n- **CVE, merged & prioritised**; CVEProject + OSV.dev + Packagist security advisories (Composer — the database `composer audit` queries) + NVD, CPE/version cross-checked to cut false positives, ranked **CISA KEV → EPSS → CVSS**.\n- **Beyond CVEs**; EOL and out-of-active-support frameworks, deprecated/abandoned/yanked, outdated with release dates, SPDX **licenses**, and **private/internal packages** — every coordinate no configured registry knows, in any ecosystem.\n- **Crypto material**; committed **certificates** (expiry, weak key, weak signature, self-signed), **private vs public keys** across PEM/OpenSSH/PuTTY/PGP and JKS/PKCS#12 keystores. Parsed offline, no network.\n- **Air-gapped**; **zero network under `--offline`**, regression-tested and reproducible under `unshare -rn`. On Maven it recovers **657/657** of OSV-Scanner's *online* result with no network interface at all, against 45 / 40 / 37 for the others. → [Benchmark](docs/BENCHMARK.md) · [Air-gapped](#air-gapped-audits)\n- **CMS & frameworks audited as instances**; Symfony, Laravel, WordPress, Drupal, Joomla, PrestaShop, TYPO3, Magento/Adobe Commerce and SPIP are auto-activated with per-instance inventory (core, plugins, themes, bundles, components) → [the dedicated guide](docs/CMS-FRAMEWORKS.md) · [application usage](docs/USAGE.md#application-inventory-experimental)\n- **Shared cache for a scanner fleet**; `fad-checker serve-cache` + `--proxy-cache` turns one box into the cache point for every other instance. → [cache usage](docs/USAGE.md#shared-proxy-cache-server-serve-cache----proxy-cache)\n- **Supply-chain risk**; known-**malicious** advisories (always block the CI gate) and suspected **typosquats** (`--typosquat`).\n- **Audit-grade**; every report carries a **provenance manifest** and a **Methodology & limitations** chapter; artifacts ship `SHA256SUMS`; **differential audits** diff against a prior run (`--baseline`) and CI can gate on *new* findings only.\n- **Reports in English or French** (`--lang fr`) \n- **Outputs & CI**; HTML + findings JSON by default (Word `.doc` on `--report-doc`), Excel `.xlsx` (`--report-xlsx`), CycloneDX 1.6 SBOM, CSAF 2.0 VEX, SARIF 2.1.0, JSON; gate with `--fail-on`, triage with `--ignore`/`--vex`. Private registries for every ecosystem.\n- Report made for productivity; every table / chart has a split **Copy for word** button.\n\n📖 **[Usage & all flags](docs/USAGE.md)** · **[Architecture](docs/ARCHITECTURE.md)** · **[Comparison vs other tools](docs/COMPARISON.md)** · **[Data sources](docs/DATA-SOURCES.md)**\n\n### Interactive HTML samples\n\n- **[Apache Dubbo 2.7.8 — open the report](https://9pings.github.io/fad-checker/samples/dubbo.html)**: the project used for the screenshot above, rescanned with v2.7.1; 105 Maven descriptors, direct/transitive CVEs, KEV/EPSS, EOL and fix recommendations.\n- **[Multi-instance CMS & frameworks — open the report](https://9pings.github.io/fad-checker/samples/multi-cms-frameworks.html)**: WordPress 6.4.2, Drupal 8.5.0, Symfony Demo (Symfony 7.1.1) and BookStack v24.10 (Laravel 10.48.22), with findings attributed to each instance.\n\nThese are standalone reports from real source scans, frozen on **2026-09-24**. The CMS sample focuses on PHP dependencies; WordPress advisory coverage is explicitly incomplete without a Wordfence feed. [Sample scope, sources and reproduction commands](docs/samples/README.md).\n\n## Why use fad-checker for code audits?\n\nWhat it does for an audit that the others don't. Same column set and sourcing discipline as\n[`docs/COMPARISON.md`](docs/COMPARISON.md) — `⚠️` is *partial* and says how, cells are meant to be\ncheckable.\n\n| What an auditor actually needs to do                                                       | **fad** | OSV | Trivy | Grype+Syft | OWASP DC | Snyk |\n| ------------------------------------------------------------------------------------------ | :-: | :-: | :-: | :-: | :-: | :-: |\n| Audit a **100-module polyglot monorepo in one command**, with **no toolchain installed** ¹ | ✅ 105 modules | ⚠️ reactor skipped | ⚠️ needs `~/.m2` | ⚠️ opt-in | ⚠️ Java build | ⚠️ `mvn` build |\n| **Scan offline / air-gapped without dropping transitive deps** ²                           | ✅ 657/657 | ❌ | ⚠️ `~/.m2` | ⚠️ opt-in | ⚠️ mirror | ❌ |\n| **Identify the private/internal deps** across a big project ³                              | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |\n| **Extract cleaned deps descriptors** into an external directory ⁴                          | ✅ `-t` | ❌ | ❌ | ❌ | ❌ | ❌ |\n| **Report EOL / deprecated frameworks & deps**, transitive ones included ⁵                  | ✅ | ⚠️ deprecated only | ⚠️ OS distros only | ❌ | ❌ | ⚠️ web UI only |\n| **Report committed keys & certificates** ⁶                                                 | ✅ | ❌ | ⚠️ key rule | ❌ | ❌ | ❌ |\n| **Spot committed binaries** (`.dll`, `.exe`, …) and check them against their checksums ⁷   | ✅ | ❌ | ⚠️ some | ⚠️ patterns | ❌ | ❌ |\n| **Clearly list what was *not* scanned** — before the client asks ⁸                         | ✅ warnings + method | ⚠️ log | ⚠️ log | ⚠️ log | ⚠️ log | ⚠️ log |\n| **Answer \"against what data?\" six months later** ⁹                                         | ✅ | ❌ | ❌ | ⚠️ DB date | ⚠️ NVD date | ❌ |\n| **Send a report, not a JSON dump** ¹⁰                                                      | ✅ HTML + `.doc` | ⚠️ HTML list | ⚠️ template | ❌ | ⚠️ HTML list | ⚠️ `snyk-to-html` |\n| **Charts, per-CVE drill-down and a pasteable Word copy** ¹¹                                | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |\n| **Make delta reports showing only what changed** ¹²                                        | ✅ `--baseline` | ❌ | ❌ | ❌ | ❌ | ⚠️ cloud |\n| **Audit CMS/framework instances as such** — plugins, themes, publisher advisories ¹³      | ✅ 9 products | ❌ | ❌ | ❌ | ❌ | ❌ |\n| **Share one cache across the fleet**, API keys server-side ¹⁴                              | ✅ `serve-cache` | ❌ | ⚠️ local DB | ⚠️ local DB | ⚠️ local DB | ⚠️ cloud |\n\n¹ No `mvn`/`go`/`npm`/`pip`/`dotnet` — manifests parsed off disk, nothing installed or executed. 105 × `pom.xml` in one pass: **790 pairs vs OSV-Scanner's 657**, 133 fad-only, versions mediated *per module* not flattened.\n\n² **657 of 657** of OSV-Scanner's *online* Maven result, under `unshare -rn` — no network interface. Tripwire-tested; only public coordinates ever leave the enclave.\n\n³ Chapter 0 names every coordinate that **every** configured registry answered 404 for — Maven, npm, PyPI, NuGet, Composer, Go and RubyGems — with the manifest(s) declaring it. A registry that timed out or errored is never counted: an inconclusive answer would otherwise accuse a client of shipping internal packages because their proxy was flaky. `-e <regex>` then excludes them.\n\n⁴ `-t <dir>`: normalised POMs plus every non-Maven lockfile mirrored, private coordinates stripped. Archivable, and scannable by anything — `--snyk` included.\n\n⁵ endoflife.date, split **direct vs transitive** so you know which dep to bump, plus deprecated / abandoned / yanked and outdated. Trivy covers OS distros only; Snyk's package health is web-only.\n\n⁶ Inventory *and* verdicts: expiry, RSA<2048, MD5/SHA1, self-signed; private **vs** public keys; JKS/PKCS#12. Offline parser. Trivy's secret rule finds the file, not the flaw.\n\n⁷ Identified by **hash** via deps.dev + CIRCL → should-be-declared / name≠checksum / unknown / malicious. Syft's patterns name a version, not an identity.\n\n⁸ Chapter 0 flags what *this* scan couldn't reach (missing lockfiles, BOM-only versions, Yarn Berry, incomplete application checks); the methodology section states what the tool never assesses. Elsewhere the first is a log line the audit never sees, the second isn't written down.\n\n⁹ Provenance manifest: tool, runtime, mode, run configuration and cache freshness for **each consulted source**. Grype and Dependency-Check carry one source's date, not the run.\n\n¹⁰ Chapters 0→6 with an executive summary and fix recipes, self-contained HTML plus optional Word `.doc`. None of the others emits Word.\n\n¹¹ Four inline-SVG charts — CWE, vulnerable transitives per root dep, your most vulnerable modules (direct vs transitive on a single-module project), and fix-priority bands. Category colours identify each slice; an aligned outer ring shows its severity mix. They render in the `.doc` too, with one-click copy as PNG (or a table as rich HTML) that pastes into Word formatted. Every CVE keeps its CVSS vector, CWE, references, CPE config and via-path behind a drill-down, with zero external assets.\n\n¹² `--baseline` adds a Δ chapter (new / fixed / unchanged); `--fail-on-new` gates on new findings only. Snyk tracks this on its platform, not as a local diff.\n¹³ Symfony, Laravel, WordPress, Drupal, Joomla, PrestaShop, TYPO3, Magento/Adobe Commerce, SPIP — inventoried per instance (core, plugins, themes, bundles, components) with direct/indirect attribution, publisher advisory feeds where they exist (Wordfence, packages.drupal.org, PrestaShop/TYPO3 GitHub) and WordPress core checksums; the others scan lockfiles only, with no CMS-instance view at all. → [the dedicated guide](docs/CMS-FRAMEWORKS.md)\n¹⁴ `fad-checker serve-cache` + `--proxy-cache`: one upstream call per provider resource per TTL for the whole fleet, single-flight coalescing, stale-if-error, and NVD/Wordfence/GitHub keys held by the server (use `--wordfence-live` to activate Wordfence with a server key). Trivy/Grype/DC cache a local DB; Snyk's is on its platform.\n\n**Where it loses** — containers/OS packages, auto-fix PRs, and CVE coverage against Snyk's curated\nfeed → [`docs/COMPARISON.md`](docs/COMPARISON.md) ·\n[the gap, measured](#coverage-honestly-the-pairs-snyk-reports-and-fad-checker-doesnt).\n\n**Deliberately not a goal: reachability.** A finding is a vulnerable version on the dependency\ngraph, and the report says exactly that (in Methodology) instead of guessing at call paths. Deciding\nwhether the vulnerable code is reachable in *this* application is the auditor's call, made with\napplication context no scanner has.\n\n## Quick start\n\n```bash\nnpm install -g fad-checker\nfad-checker -s ./my-project          # → ./fad-checker-report/cve-report.html\n```\n\nA free [NVD API key](https://nvd.nist.gov/developers/request-an-api-key) (instant) gives 10× faster enrichment: `fad-checker --set-nvd-key YOUR_KEY`. A few common runs; full list via `fad-checker --help` or [docs/USAGE.md](docs/USAGE.md):\n\n```bash\nfad-checker -s ./proj -e \"^com\\.acme\\.\"                        # exclude private libs (coord regex)\nfad-checker -s ./proj -t ../clean -e \"^com\\.acme\\.\"            # extract only: normalised descriptors, private modules flagged\nfad-checker -s ./proj -t ../clean -e \"^com\\.acme\\.\" -a snyk   # same extraction + scan + merge Snyk\nfad-checker -s ./proj --offline                                # fully offline (zero network, needs a warmed cache)\nfad-checker -s ./proj -a osv-db,typosquat                      # offline-complete OSV + typosquat\nfad-checker -s ./proj -a licenses --fail-on high               # license chapter + CI gate\nfad-checker -s ./proj --report-json --baseline last.json --fail-on-new   # differential audit: fail CI on NEW findings\nfad-checker diff last.json this.json                           # standalone diff of two findings JSONs\nfad-checker -s ./proj -r html,json,xlsx                        # include the Excel workbook\nfad-checker -s ./site --app-plugins wordpress --private-component wp-content/plugins/acme --offline\n```\n\n> [!IMPORTANT]\n> **`--offline` reads the cache, it doesn't replace it.** On a *cold* cache there is nothing to\n> match against, so an offline first run legitimately reports **0 CVE / 0 EOL / 0 outdated**;\n> that's an empty cache, not a clean project. Warm it once (a normal online run on any project,\n> or `--import-cache`), then `--offline` returns the full result set with zero network calls.\n> Air-gapped machines get their cache via [`--export-cache` / `--import-cache`](#air-gapped-audits).\n\nA single self-contained binary (no Node), from-source install and shell completion are in → [docs/USAGE.md](docs/USAGE.md).\n\n## What it finds\n\nThe report keeps the six root chapters. Sub-chapters appear only when they contain results and are numbered consecutively; application inventory and methodology remain available in scan context:\n\n| Chapter | Source | What it catches |\n| --- | --- | --- |\n| **0. Warnings** *(top)* | local heuristics | Missing lockfiles, unresolved Maven versions (BOM-managed), private packages absent from configured registries |\n| **Δ. Changes since baseline** *(top, with `--baseline`)* | diff vs prior JSON | New / fixed / unchanged findings per category + the list of **new production CVEs**; for repeat audits and `--fail-on-new` CI gating |\n| **1. CVE** *(X direct, Y indirect, Z dev)* | CVEProject + OSV.dev + Packagist + qualified publisher feeds + NVD/CPE | **Applications first when findings exist**; CMS/framework findings by instance and owner · **Production**; public CVE / GHSA in other prod deps, per ecosystem, per manifest, **prioritised** by CISA KEV + EPSS + CVSS · **Vendored JS vulns** ([retire.js](https://retirejs.github.io/)) — one row per physical library, linked CVEs + CWEs on the row, every advisory behind a click · **Dev** (`test`/`provided`, `dev`/`optional`/`peer`) · **Likely false positives** (CPE-filtered) |\n| **2. Unmanaged / unversioned components** | deps.dev + CIRCL (by checksum), retire.js, built-in X.509 | **Embedded binaries**; CVEs in libs shipped inside committed `.jar`/`.war`/`.ear` (fat-jars, shaded uber-jars) · **Native binaries** (`.dll`/`.exe`/`.so`/`.dylib`) identified by hash, flagged should-be-managed / name≠checksum / unknown / malicious · **Vendored JavaScript** inventory (jQuery, Bootstrap, …) vulnerable *or not* · **Certificates &amp; key material**; committed certs (expiry / weak key / weak signature / self-signed), **private vs public keys** (PEM/OpenSSH/PuTTY/PGP/SSH) and keystores, all parsed offline |\n| **3. Maintenance / EOL** *(X EOL, Y obsolete, Z outdated)* | endoflife.date · curated + registry flags · Maven Central / npm / Packagist / PyPI / NuGet | **End-of-Life** frameworks (+ an \"Out of active support\" band with `--eol-support`; Symfony/Laravel grouped as one row per framework; PHP runtime when the Composer constraint proves it), split **direct** (declared / parent-POM-inherited — bump these) vs **transitive** (bump the dep that pulls them in) · **Obsolete / deprecated / abandoned / yanked** · **Outdated** (newer version available, with release dates; direct deps only) |\n| **4. Licenses** *(opt-in: `--licenses`)* | registry metadata + Maven POMs → SPDX policy | Each dep's license normalised to SPDX and classified; copyleft (GPL/AGPL/LGPL/MPL), proprietary and unknown flagged for review |\n| **5. Fix Recommendations** | computed | Per-ecosystem pin recipes: Maven `<dependencyManagement>`, Gradle `constraints { }`, npm `overrides`, yarn `resolutions`, `composer require`, `pip install`, `dotnet add package` |\n| **6. Scan context & limitations** | provenance manifest + walk | **Scanned descriptors** (every manifest parsed) · **Ignored directories** (pruned paths + rule) · **Methodology, data sources & limitations** (data-source freshness, run config, explicit statement of **what fad-checker does *not* assess**) · **Application inventory & coverage** (also shown when no CVE matches) |\n| **Supply-chain risk** *(cross-cutting)* | OSV `MAL-…` + name heuristic | **Known-malicious** packages (always block the CI gate, any `--fail-on` level) and **suspected typosquats** (`--typosquat`: an npm/PyPI name one edit from a popular package; `lodahs`↔`lodash`) |\n\nThe HTML report opens in any browser, contains every detail (CVSS vectors, references, full descriptions, CPE configurations, via-paths for transitives) and ships a Word-compatible `.doc` twin. Every match carries a **composite priority** (KEV-exploited > EPSS likelihood > CVSS severity), and the run can additionally emit a **CycloneDX 1.6 SBOM** (`--report-sbom`, vulnerabilities inline) and a **CSAF 2.0 VEX** (`--report-csaf`) for downstream tooling.\n\n<p align=\"center\"><img src=\"docs/assets/report.png\" alt=\"fad-checker HTML report; executive summary with severity tiles and a detailed CVE table with CWE, descriptions and fix versions\" width=\"900\"></p>\n\n\n## CMS & frameworks\n\nSee the [CMS coverage limits](docs/CMS-FRAMEWORKS.md#coverage-and-its-current-limits)\nand [shared-cache operating limits](docs/USAGE.md#shared-proxy-cache-server-serve-cache--proxy-cache).\n\nfad-checker doesn't just read the `composer.json` under a WordPress or Drupal site — it inventories the **instance**: core, plugins, themes, bundles and framework components with their observed versions, attributes every dependency CVE to the component that ships it, and reports each instance in its own sub-chapter — synthesis included even when it comes out clean. Any recognized layout is activated by the default `--app-plugins auto`; `none` opts out.\n\n| Product | Inventory | Advisory lane |\n| --- | --- | --- |\n| **WordPress** | core (`wp-includes/version.php`), plugins (public or private by `Update URI`), themes | **Wordfence** production feed (API key, or a warmed catalogue offline) + **core checksums** integrity (api.wordpress.org) |\n| **Drupal** | core (lock + `Drupal.php` marker), modules incl. `modules/contrib`, themes, profiles, Drupal 7 branch | **packages.drupal.org** per-package security advisories |\n| **Symfony** | framework, framework-components, bundles, libraries; **Symfony Flex recipes** (`symfony.lock`) | the dependency lanes (OSV.dev, Packagist, NVD) — no publisher feed exists, and the coverage says so |\n| **Laravel** | framework, bundles, libraries | the dependency lanes (OSV.dev, Packagist, NVD) |\n| **PrestaShop** | core (`_PS_VERSION_`), modules, themes | the publisher's **GitHub security-advisories** feed |\n| **TYPO3** | core, extensions | the publisher's **GitHub security-advisories** feed |\n| **SPIP** | core (`$spip_version_branche` in `ecrire/inc_version.php`), dist plugins (`paquet.xml`), user plugins (`paquet.xml`/legacy `plugin.xml`) | **NVD product CVEs** (`cpe:2.3:a:spip:spip`) — the only machine-readable SPIP source; plugins stay honestly not-qualified |\n| **Joomla / Magento (Adobe Commerce)** | core, extensions/modules, themes | no machine-readable publisher feed exists; components locked as Composer packages read as covered by the **dependency lanes**, the rest stays honestly **not qualified**. A Magento source distribution reports its exact version from the root `composer.json` |\n\nEvery advisory snapshot a live lane fetches is stamped and cached in `~/.fad-checker/advisory-snapshots/`, carried by `--export-cache`/`--import-cache`, **warmed from the air-gapped descriptor itself** by `--import-anonymized`, and reused automatically offline — the Wordfence API key never travels to the enclave. Private/custom components are inventoried separately and never sent to any publisher. → **[the dedicated guide](docs/CMS-FRAMEWORKS.md)** · [application usage](docs/USAGE.md#application-inventory-experimental)\n\n## Air-gapped audits\n\n> **Zero-data-sent guarantee.** Under `--offline`, fad-checker makes **no network calls\n> whatsoever**; it reads only the warmed `~/.fad-checker/` caches and never transmits a\n> dependency, path or finding off the machine. It is regression-tested\n> (`test/offline-guarantee.test.js`, a tripwire fetcher that throws if touched) and\n> auditor-reproducible: `unshare -rn node fad-checker.js -s ./proj --offline …` runs it in a\n> namespace with **no network interface** and yields byte-identical findings. Unlike the\n> mainstream OSS scanners, fad also resolves the **Maven transitive graph** offline; so on\n> an air-gapped multi-module project it finds the transitive CVEs they can't.\n\nWhen the audited system is **offline / confidential** (typical of a regulated or air-gapped audit) it\ncan't reach OSV / NVD / Maven Central / npm. Split the work across machines while keeping\n**zero environment information** off the secure enclave: an anonymized descriptor carries\nonly **public package coordinates**; no filesystem paths, no registry URLs, no\nhostnames/usernames; and the **detailed report is produced back on the offline machine**.\n\nThe transfer relies on a property of fad-checker's caches: they are keyed by *coordinate*\nor *vuln id*, never by path, so they are **machine-independent**. The online step just\n**warms the caches**; the offline step replays the scan and gets cache hits.\n\n```bash\n# ── Phase 1; OFFLINE (audited machine): export the anonymized descriptor ──\n# Exclude private/internal packages with -e (offline we can't tell private from public).\nfad-checker -s ./proj -e \"^(client|internal)\\.\" --export-anonymized deps.json\n#   → deps.json: public coordinates only. Review it before it leaves the enclave.\n\n# ── Phase 2; ONLINE (any machine, no source needed): warm the caches ──\nfad-checker --import-anonymized deps.json     # scans coordinates → OSV/NVD/CVE/registry/EOL + retire signatures\n                                              #   + warms the CMS advisory snapshots (Drupal/PrestaShop/TYPO3 feeds,\n                                              #   WP checksums per core version, Wordfence when a key is set)\nfad-checker --export-cache fad-cache.tar.gz   # bundle the warmed ~/.fad-checker/\n\n# ── Phase 3; OFFLINE (audited machine): full report, all local context ──\nfad-checker --import-cache fad-cache.tar.gz   # merged into the enclave's own cache\nfad-checker -s ./proj --offline               # re-collect locally (real paths) + cache hits\n#   → full HTML/.doc report with manifests & structure, generated inside the enclave.\n#   CMS advisory snapshots (Drupal/PrestaShop/TYPO3 feeds, WP checksums) fetched live by\n#   the online phase ride the same archive and are consumed automatically — no flags.\n```\n\nWhat the descriptor (`fad-deps/1`) contains vs. drops:\n\n| Kept (needed to scan) | Dropped (environment) |\n| --- | --- |\n| ecosystem, ecosystemType | manifest paths / pom paths |\n| namespace, name | resolved registry URLs |\n| version, versions | integrity hashes |\n| scope, isDev | parent chains, lockfile type |\n| application type + core version + inventoried **public** component identities | private component identities |\n\nThe online phase report is itself path-free; vendored-JavaScript (retire.js) findings are\nproduced **offline in phase 3**, since retire needs the actual `.js` files; its signature\nDB is warmed online (phase 2) and carried by `--export-cache`. Full offline/cache control →\n[`docs/USAGE.md`](docs/USAGE.md).\n\n## Docs\n\n- [`docs/USAGE.md`](docs/USAGE.md); every flag and workflow: offline/cache control, private registries, config files, recipes, safety rails.\n- [`docs/CMS-FRAMEWORKS.md`](docs/CMS-FRAMEWORKS.md); the CMS/framework instance view: detection markers, per-product advisory lanes, coverage semantics and the air-gapped workflow.\n- [`docs/ARCHITECTURE.md`](docs/ARCHITECTURE.md); internals: codecs, collection, matching, report pipeline.\n- [`docs/COMPARISON.md`](docs/COMPARISON.md); vs OSV-Scanner / Trivy / Grype / OWASP DC / Snyk, and how it stays build-free.\n- [`docs/BENCHMARK.md`](docs/BENCHMARK.md) — reproducible air-gapped recall benchmark vs OSV-Scanner on a public 105-module project.\n- [`docs/DATA-SOURCES.md`](docs/DATA-SOURCES.md); the public datasets fad-checker uses + their licenses.\n- [`CHANGELOG.md`](CHANGELOG.md) · [`CLAUDE.md`](CLAUDE.md); release history · code-level orientation for contributors.\n\n## Contributing\n\nThe most useful contribution to a young scanner is **telling it where it's wrong**: run it on a\nreal project and file a [false positive / false negative report](https://github.com/9pings/fad-checker/issues/new?template=false_positive.yml)\nwith the coordinate and the manifest snippet that produced it. Dev setup, ground rules and the\ncodec extension point → [`CONTRIBUTING.md`](CONTRIBUTING.md). Vulnerabilities in fad-checker\nitself → [`SECURITY.md`](SECURITY.md) (please report privately).\n\n**On AI assistance:** this codebase is written with heavy use of Claude Code; [`CLAUDE.md`](CLAUDE.md)\nin the repo root is exactly what it looks like. The bar it's held to is the one you can check\nyourself: **847 tests** (`npm test`), the zero-network guarantee enforced by a tripwire test and\nreproducible under `unshare -rn`, and coverage numbers measured against a Snyk baseline rather\nthan asserted. `fad-checker` itself uses **no LLM at runtime**; findings come from public\nvulnerability databases and deterministic parsers, and no report text is generated. Full\nstatement, including where review actually caught a bad finding →\n[`AI_POLICY.md`](AI_POLICY.md). Where the code doesn't meet that bar, that's a bug report I want.\n\n## License\n\nMIT; see [`LICENSE`](LICENSE).\n","readmeFilename":"README.md"}