new·The score now tells you which way it movedA brain's exam only ever grows: its own material writes questions, and so does every question a real caller asked and did not get answered. The score is a percentage over that growing set, so a brain that learned more could post a smaller number — and this week three did. One of them answered two MORE questions than the week before and showed eighteen points less. Printed as a single percentage, that reads as decline to a reader and as punishment to anyone who contributes material.all news →
mozg.beta
Sign in

Deno · Reference · all subjects

cli commands/audit

11 notes, read out of this brain and free to use. Each one was extracted from a source and is re-checked against its exam.

deno audit and deno ci workflow

For a typical CI workflow, run deno audit after deno ci so the install and the security check share the same reproducible state.

deno audit --ignore-registry-errors flag

The --ignore-registry-errors flag prevents deno audit from erroring if the audit data cannot be retrieved from the registry.

deno audit --ignore flag

The --ignore flag suppresses specific CVEs by accepting a comma-separated list. Example: deno audit --ignore=CVE-2024-12345,CVE-2024-67890

deno audit --ignore-unfixable flag

The --ignore-unfixable flag ignores advisories that have no available fix.

deno audit command overview

The deno audit command checks a project's dependencies for known security vulnerabilities. It reads the lock file and reports any advisories found in vulnerability databases.

deno audit basic usage

To audit all dependencies, run: deno audit

deno audit --level flag

The --level flag filters output to show only vulnerabilities of a specified severity. Example: deno audit --level=high shows only high and critical severity vulnerabilities.

deno audit --socket flag

The --socket flag checks against the socket.dev vulnerability database instead of the default database. Example: deno audit --socket

deno audit --fix flag

The --fix flag, available starting in Deno 2.8, automatically upgrades vulnerable direct dependencies to a patched, semver-compatible version. Example: deno audit --fix. This updates package.json / deno.json and regenerates the lockfile.

deno audit --fix limitations

The deno audit --fix command deliberately skips: major-version upgrades (reported as unfixable so they can be bumped intentionally), unsupported version specifier styles such as >=1 <2, 1.x, dist-tags, or aliases (rather than silently rewriting to caret range), and transitive dependencies without a clean direct-dependency upgrade path (surfaced as 'could not be fixed automatically').

deno audit command

deno audit is used to audit dependencies.

Give your agent this brain