Overview
Optional first-party modules for @absolutejs/vulnerabilities. Each module remains an independently versioned npm package; this repository is their source monorepo.
Vulnerability Modules
@absolutejs/vulnerabilities-modulesworkspacealphaPlatform & InfraOptional first-party modules for AbsoluteJS vulnerability management.
#Installation
BASH
git clone https://github.com/absolutejs/vulnerabilities-modules.git#Capabilities
Overview
Optional first-party modules for @absolutejs/vulnerabilities. Each module remains an independently versioned npm package; this repository is their source monorepo.
Packages
Workspace — Package — Role
report/ — @absolutejs/vulnerabilities-report — Deterministic evidence-backed reporting
worker/ — @absolutejs/vulnerabilities-worker — Continuous vulnerability intelligence orchestration
Show 1 more
witness/ — @absolutejs/vulnerabilities-witness — Independently deployable transparency witness
Development
The Witness container remains independently deployable. Its package-local lock file is retained so witness/Dockerfile can build from the witness/ context. Each workspace retains its own license and changelog.
Repository composition
3 public packages and 0 private workspace projects are versioned and developed together.
Outcomes
What you can build
Packages
Workspace — Package — Role
Development
The Witness container remains independently deployable. Its package-local lock file is retained so witness/Dockerfile can build from the witness/ context. Each workspace retains its own license and changelog.
Hardening checklist
Production guidance
DevelopmentThe Witness container remains independently deployable. Its package-local lock file is retained so witness/Dockerfile can build from the witness/ context. Each workspace retains its own license and changelog.
Follow in order
Troubleshooting path
1
Trace from the first failed boundary
Reproduce the smallest canonical @absolutejs/vulnerabilities-modules example, confirm the supported entry point and version in the API explorer, then inspect the first boundary that did not produce its documented result.
#Development
Partial snippetWorking example for Development.
SH
bun install
bun run typecheck
bun run test
bun run build#Workspace contents
3 public packages and 0 private workspace projects are maintained in this repository.
@absolutejs/vulnerabilities-reportv0.1.2
Public package — Deterministic, evidence-backed, print-ready HTML reports for AbsoluteJS vulnerability management.
@absolutejs/vulnerabilities-witnessv0.7.4
Public package — Independent durable transparency witness with rollback, equivocation, key-rotation, and HTTP service primitives for AbsoluteJS vulnerability evidence.
@absolutejs/vulnerabilities-workerv0.2.4
Public package — Continuous feed refresh, inventory correlation, VEX, risk, remediation, leases, health, and metrics for AbsoluteJS vulnerability management.
#Package commands
Scripts declared by this project’s package manifest.
bun run buildbun run --filter './*' build
bun run check:packagebun run --filter './*' check:package
bun run formatbun run --filter './*' format
bun run testbun run --filter './*' test
bun run typecheckbun run --filter './*' typecheck
Workspace project
This workspace project is not published as a standalone npm package. Use its repository and the accurately labeled public or private workspace contents below.