From Scan Report to Fix: A Guide to Node.js Package CVE Remediation
How I work through scan paths, dependency trees, and version ranges to choose a remediation strategy for CVEs in direct and transitive Node.js dependencies.
Find problems. Understand principles. Capture what matters.
Documenting my ongoing explorations in software development.
Technical perspectives, hands-on projects, and lessons learned.
How I work through scan paths, dependency trees, and version ranges to choose a remediation strategy for CVEs in direct and transitive Node.js dependencies.
How I use Trivy to scan Docker images locally, find and fix vulnerabilities during development, and verify fixes without waiting for DevOps reports. Includes the script I use, jq filters, and ways to pinpoint vulnerabilities with Class and PkgPath.
A practical look at clsx, tailwind-merge, tw-animate-css, CVA, and components.json for conditional styles, class conflicts, animations, component variants, and registries.
Learn by writing, turn ideas into understanding.
Building a personal knowledge base, one concept and solution at a time.