Overview
Feed and storage adapters for @absolutejs/vulnerabilities. Each adapter remains an independently versioned npm package; this repository is their source monorepo.
Vulnerability Adapters
@absolutejs/vulnerabilities-adaptersworkspacealphaPlatform & InfraFeed and storage adapters for @absolutejs/vulnerabilities.
#Installation
BASH
git clone https://github.com/absolutejs/vulnerabilities-adapters.git#Capabilities
Overview
Feed and storage adapters for @absolutejs/vulnerabilities. Each adapter remains an independently versioned npm package; this repository is their source monorepo.
Packages
Workspace — Package — Role
epss/ — @absolutejs/vulnerabilities-epss — FIRST EPSS scoring feed
kev/ — @absolutejs/vulnerabilities-kev — CISA Known Exploited Vulnerabilities feed
Show 4 more
osv/ — @absolutejs/vulnerabilities-osv — OSV advisory feed
postgres/ — @absolutejs/vulnerabilities-postgres — PostgreSQL persistence
ubuntu/ — @absolutejs/vulnerabilities-ubuntu — Canonical Ubuntu advisory feed
The npm package names and version histories are unchanged by the move into this monorepo.
Development
Each workspace retains its own license and changelog.
Repository composition
5 public packages and 0 private workspace projects are versioned and developed together.
Outcomes
What you can build
Packages
Workspace — Package — Role
Development
Each workspace retains its own license and changelog.
Hardening checklist
Production guidance
Make every external boundary explicitPin the deployed @absolutejs/vulnerabilities-adapters version, replace example or memory-backed dependencies with durable implementations, bound external calls, protect credentials, and emit enough evidence to retry or recover safely.
Follow in order
Troubleshooting path
1
Trace from the first failed boundary
Reproduce the smallest canonical @absolutejs/vulnerabilities-adapters example, confirm the supported entry point and version in the API explorer, then inspect the first boundary that did not produce its documented result.
#Development
Partial snippetWorking example for Development.
SH
bun install
bun run typecheck
bun run test
bun run build#Workspace contents
5 public packages and 0 private workspace projects are maintained in this repository.
@absolutejs/vulnerabilities-epssv0.1.6
Public package — FIRST EPSS probability and percentile ingestion for AbsoluteJS vulnerability prioritization.
@absolutejs/vulnerabilities-kevv0.1.6
Public package — CISA Known Exploited Vulnerabilities catalog ingestion for AbsoluteJS.
@absolutejs/vulnerabilities-osvv0.1.8
Public package — Official OSV API ingestion and advisory normalization for AbsoluteJS vulnerability management.
@absolutejs/vulnerabilities-postgresv0.9.3
Public package — Durable Postgres feeds, findings, alert incidents, policy history, delivery queues, remediation evidence, and risk assessments for AbsoluteJS vulnerability management.
@absolutejs/vulnerabilities-ubuntuv0.1.5
Public package — Canonical Ubuntu OSV advisory ingestion for AbsoluteJS vulnerability management.
#Package commands
Scripts declared by this project’s package manifest.
bun run buildbun run --filter '@absolutejs/vulnerabilities-epss' build && bun run --filter '@absolutejs/vulnerabilities-kev' build && bun run --filter '@absolutejs/vulnerabilities-osv' build && bun run --filter '@absolutejs/vulnerabilities-postgres' build && bun run --filter '@absolutejs/vulnerabilities-ubuntu' build
bun run build:osvbun run --filter '@absolutejs/vulnerabilities-osv' build
bun run check:packagebun run --filter '@absolutejs/vulnerabilities-epss' check:package && bun run --filter '@absolutejs/vulnerabilities-kev' check:package && bun run --filter '@absolutejs/vulnerabilities-osv' check:package && bun run --filter '@absolutejs/vulnerabilities-postgres' check:package && bun run --filter '@absolutejs/vulnerabilities-ubuntu' check:package
bun run formatbun run --filter './*' format
bun run testbun run build:osv && bun run --filter './*' test
bun run typecheckbun run build:osv && bun run --filter './*' typecheck
Workspace project
This workspace project is not published as a standalone npm package. Use its repository and the accurately labeled public or private workspace contents below.