@renovatebot/osv-offline
Advanced tools
[](https://www.npmjs.com/package/@renovatebot/osv-offline) [
This package is licensed under the MIT license.
Vulnerabilities are provided from the following upstream data sources and licenses:
FAQs
[](https://www.npmjs.com/package/@renovatebot/osv-offline) [
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team uncovered a malicious Python package typosquatting the popular 'fabric' SSH library, silently exfiltrating AWS credentials from unsuspecting developers.
Security News
At its inaugural meeting, the JSR Working Group outlined plans for an open governance model and a roadmap to enhance JavaScript package management.
Security News
Research
An advanced npm supply chain attack is leveraging Ethereum smart contracts for decentralized, persistent malware control, evading traditional defenses.
