What Vulnerability DB does npm audit use?

(Sam Yamashita) #1

It might be dumb question. I have already googled before I submit this question but I cannot find.

I am considering the way to manage dependencies and creating comparison table so I would like know which Vulnerability DB npm audit is based on.

Thanks in advance.

(Lars Willighagen) #2

This one: https://www.npmjs.com/advisories (previously called the Node Security Project)

1 Like
(Sam Yamashita) #3

I appreciate your answer.