AbsoluteJS

@absolutejs/vulnerabilities-report

@absolutejs/vulnerabilities-reportv0.1.2betaPlatform & Infra

Deterministic, evidence-backed, print-ready HTML reports for AbsoluteJS vulnerability management.

#Installation

BASH
bun add @absolutejs/vulnerabilities-report

#Capabilities

Overview

Deterministic, evidence-backed security response reports for AbsoluteJS vulnerability management. The package maps reported issues to explicit determinations, remediation state, VEX evidence, exact deployment releases, and later verification without coupling the report to a hosted platform or PDF engine.

The HTML renderer is self-contained, contains print styles for Letter-sized PDF output, has no scripts or external assets, escapes all report content, and includes a SHA-256 digest over the canonical report payload.

Applications may create ReportedSecurityIssue records directly for an external scanner report or use createReportedIssueFromFinding to project AbsoluteJS managed findings, VEX decisions, remediation plans, executions, and verification evidence into the same report format.

Outcomes

What you can build

Build on the supported package contract

Use @absolutejs/vulnerabilities-report through its supported public entry points.

Hardening checklist

Production guidance

Make every external boundary explicitPin the deployed @absolutejs/vulnerabilities-report version, replace example or memory-backed dependencies with durable implementations, bound external calls, protect credentials, and emit enough evidence to retry or recover safely.

Follow in order

Troubleshooting path

1
Trace from the first failed boundary
Reproduce the smallest canonical @absolutejs/vulnerabilities-report example, confirm the supported entry point and version in the API explorer, then inspect the first boundary that did not produce its documented result.

#@absolutejs/vulnerabilities-report quick start

Partial snippet

# @absolutejs/vulnerabilities-report

TS
import {
	createVulnerabilitySecurityReport,
	renderVulnerabilitySecurityReportHtml
} from '@absolutejs/vulnerabilities-report';

const report = createVulnerabilitySecurityReport({
	generatedAt: new Date().toISOString(),
	issues,
	preparedBy: 'Security Operations',
	preparedFor: 'Client',
	reportId: 'security-report-2026-07',
	scope: 'Production web and host vulnerability posture',
	source: {
		assessedAt: '2026-07-17T20:59:48.000Z',
		name: 'External vulnerability scan',
		reference: 'scan-13747781'
	},
	title: 'Security Remediation Response'
});

const html = renderVulnerabilitySecurityReportHtml(report);

#Public entry points

Supported entry points declared by this package manifest.

Package entry point declared in package.json.

@absolutejs/vulnerabilities-report@absolutejs/vulnerabilities-report/manifest@absolutejs/vulnerabilities-report/manifest.json

#Package commands

Scripts declared by this package manifest.

bun run buildrm -rf dist && bun build src/index.ts src/manifest.ts --outdir dist --target=bun --external @absolutejs/manifest --external @absolutejs/vulnerabilities --external '@absolutejs/vulnerabilities/*' --external @sinclair/typebox && tsc -p tsconfig.build.json && absolute-manifest emit
bun run check:packagebun run format && bun run typecheck && bun run test && bun run verify-package && bun run build && bun run verify-package --artifacts
bun run formatprettier --write "./**/*.{ts,json,md}"
bun run testbun test
bun run typechecktsc --noEmit

#API reference

Search the declarations exported by the current package type files. Expand a symbol to inspect its source-backed signature.

14 symbols
ReportDeterminationSchemavaluePermalinkSource
TS
const ReportDeterminationSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"real">, import("@sinclair/typebox").TLiteral<"false_positive">, import("@sinclair/typebox").TLiteral<"informational">]>;
Exported from @absolutejs/vulnerabilities-report