Skip to content

Commit 3bd3883

Browse files
committed
Correct the text for section 5.6
1 parent 377a5b1 commit 3bd3883

File tree

1 file changed

+2
-4
lines changed

1 file changed

+2
-4
lines changed

readme.md

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1900,11 +1900,9 @@ license-checker --summary --failOn BSD
19001900
<br/><br/>
19011901

19021902
## ⚪ ️5.6 Constantly inspect for vulnerable dependencies
1903-
:white_check_mark: **Do:** Licensing and plagiarism issues are probably not your main concern right now, but why not tick this box as well in 10 minutes? A bunch of npm packages like license check and plagiarism check (commercial with free plan) can be easily baked into your CI pipeline and inspect for sorrows like dependencies with restrictive licenses or code that was copy-pasted from Stackoverflow and apparently violates some copyrights
1904-
<br/>
1905-
1903+
:white_check_mark: **Do:** Even the most reputable dependencies such as Express have known vulnerabilities. This can get easily tamed using community tools such as [npm audit](https://docs.npmjs.com/getting-started/running-a-security-audit), or commercial tools like [snyk](https://snyk.io/) (offer also a free community version). Both can be invoked from your CI on every build
19061904

1907-
**Otherwise:** Even the most reputable dependencies such as Express have known vulnerabilities. This can get easily tamed using community tools such as [npm audit](https://docs.npmjs.com/getting-started/running-a-security-audit), or commercial tools like [snyk](https://snyk.io/) (offer also a free community version). Both can be invoked from your CI on every build
1905+
**Otherwise:** Keeping your code clean from vulnerabilities without dedicated tools will require to constantly follow online publications about new threats. Quite tedious
19081906

19091907

19101908
<br/>

0 commit comments

Comments
 (0)