AbsoluteJS

@absolutejs/vulnerabilities-kev

@absolutejs/vulnerabilities-kevv0.1.6betaPlatform & Infra

CISA Known Exploited Vulnerabilities catalog ingestion for AbsoluteJS.

#Installation

BASH
bun add @absolutejs/vulnerabilities-kev

#Capabilities

Overview

Official CISA Known Exploited Vulnerabilities catalog ingestion for @absolutejs/vulnerabilities.

The adapter preserves each CVE's exploitation status, ransomware-campaign field, required action, CISA due date, CWE identifiers, vendor, and product. It validates catalog counts and duplicate identifiers before accepting a snapshot. ETag and Last-Modified validators make unchanged refreshes return not_modified without replacing cached intelligence.

Outcomes

What you can build

Build on the supported package contract

Use @absolutejs/vulnerabilities-kev through its supported public entry points.

Hardening checklist

Production guidance

Make every external boundary explicitPin the deployed @absolutejs/vulnerabilities-kev version, replace example or memory-backed dependencies with durable implementations, bound external calls, protect credentials, and emit enough evidence to retry or recover safely.

Follow in order

Troubleshooting path

1
Trace from the first failed boundary
Reproduce the smallest canonical @absolutejs/vulnerabilities-kev example, confirm the supported entry point and version in the API explorer, then inspect the first boundary that did not produce its documented result.

#@absolutejs/vulnerabilities-kev quick start

Partial snippet

# @absolutejs/vulnerabilities-kev

TS
import { createKevAdapter } from "@absolutejs/vulnerabilities-kev";

const adapter = createKevAdapter();

#Public entry points

Supported entry points declared by this package manifest.

Package entry point declared in package.json.

@absolutejs/vulnerabilities-kev@absolutejs/vulnerabilities-kev/manifest@absolutejs/vulnerabilities-kev/manifest.json

#Package commands

Scripts declared by this package manifest.

bun run buildrm -rf dist && bun build src/index.ts src/manifest.ts --outdir dist --target=bun --external @absolutejs/manifest --external @absolutejs/vulnerabilities --external '@absolutejs/vulnerabilities/*' --external @sinclair/typebox && tsc -p tsconfig.build.json && absolute-manifest emit
bun run check:packagebun run format && bun run typecheck && bun run test && bun run verify-package && bun run build && bun run verify-package --artifacts
bun run formatprettier --write "./**/*.{ts,json,md}"
bun run testbun test
bun run typechecktsc --noEmit

#API reference

Search the declarations exported by the current package type files. Expand a symbol to inspect its source-backed signature.

6 symbols
CISA_KEV_URLvaluePermalinkSource
TS
const CISA_KEV_URL = "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json";
Exported from @absolutejs/vulnerabilities-kev