Node.js runtime: Language runtimes, standard libraries, package installers and build tools execute application code and handle untrusted programs or packages.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Rust compiler and standard library: Language runtimes, standard libraries, package installers and build tools execute application code and handle untrusted programs or packages.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
1 checked entries were not usable (Feed item lacks substantive release notes)
Bun: Language runtimes, standard libraries, package installers and build tools execute application code and handle untrusted programs or packages.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
5 checked entries were not usable (Feed item lacks substantive release notes)
Deno: Language runtimes, standard libraries, package installers and build tools execute application code and handle untrusted programs or packages.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Elixir: Language runtimes, standard libraries, package installers and build tools execute application code and handle untrusted programs or packages.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
4 checked entries were not usable (Feed item lacks substantive release notes)
Erlang OTP: Language runtimes, standard libraries, package installers and build tools execute application code and handle untrusted programs or packages.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Julia: Language runtimes, standard libraries, package installers and build tools execute application code and handle untrusted programs or packages.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
4 checked entries were not usable (Feed item lacks substantive release notes)
Scala: Language runtimes, standard libraries, package installers and build tools execute application code and handle untrusted programs or packages.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
4 checked entries were not usable (Feed item lacks substantive release notes)
PHP runtime: Language runtimes, standard libraries, package installers and build tools execute application code and handle untrusted programs or packages.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
6 checked entries were not usable (Feed item lacks substantive release notes)
Composer: Language runtimes, standard libraries, package installers and build tools execute application code and handle untrusted programs or packages.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
setuptools: Language runtimes, standard libraries, package installers and build tools execute application code and handle untrusted programs or packages.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
9 checked entries were not usable (Feed item lacks substantive release notes)
virtualenv: Language runtimes, standard libraries, package installers and build tools execute application code and handle untrusted programs or packages.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Poetry: Language runtimes, standard libraries, package installers and build tools execute application code and handle untrusted programs or packages.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
uv: Language runtimes, standard libraries, package installers and build tools execute application code and handle untrusted programs or packages.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
RubyGems and Bundler: Language runtimes, standard libraries, package installers and build tools execute application code and handle untrusted programs or packages.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
npm: Language runtimes, standard libraries, package installers and build tools execute application code and handle untrusted programs or packages.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
8 checked entries were not usable (Feed item lacks substantive release notes)
pnpm: Language runtimes, standard libraries, package installers and build tools execute application code and handle untrusted programs or packages.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
1 checked entries were not usable (Feed item lacks substantive release notes)
Yarn: Language runtimes, standard libraries, package installers and build tools execute application code and handle untrusted programs or packages.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
9 checked entries were not usable (Feed item lacks substantive release notes)
Apache Maven: Language runtimes, standard libraries, package installers and build tools execute application code and handle untrusted programs or packages.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
1 checked entries were not usable (Feed item lacks substantive release notes)
Gradle: Language runtimes, standard libraries, package installers and build tools execute application code and handle untrusted programs or packages.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
3 checked entries were not usable (Feed item lacks substantive release notes)
Express: Widely deployed JavaScript HTTP frameworks, request parsers, authentication helpers and build tooling form common application attack surfaces.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Fastify: Widely deployed JavaScript HTTP frameworks, request parsers, authentication helpers and build tooling form common application attack surfaces.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
2 checked entries were not usable (Feed item lacks substantive release notes)
Koa: Widely deployed JavaScript HTTP frameworks, request parsers, authentication helpers and build tooling form common application attack surfaces.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Hono: Widely deployed JavaScript HTTP frameworks, request parsers, authentication helpers and build tooling form common application attack surfaces.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
2 checked entries were not usable (Feed item lacks substantive release notes)
Structured advisory databases are configured by default; vendor feeds are opt-in. Catalog entries do not establish live uptime or complete coverage. Vendor checks verify retrieval and parsing, not extraction accuracy.