yarn-osv-audit
JSON →A lightweight, zero-dependency CLI tool (v0.1.8, active development) that audits Yarn Classic (v1) lockfiles against the OSV.dev vulnerability database. It supports four output formats (compact, table, json, summary), config files, severity filtering, and allowlisting. Unlike npm audit or yarn audit, it uses the open-source OSV database and works with Yarn v1 lockfiles. Requires Node >=18. Released via GitHub Actions with npm provenance.
Traffic · last 30 days ↓83% vs prev 7d
total hits 15
actors 6 distinct systems
last hit 7d ago human
top countries 🇺🇸 United States · 🇨🇦 Canada · 🇮🇳 India · TH · 🇫🇷 France