From 3985ba45652cd111ad966fd0583e85968c56b4d6 Mon Sep 17 00:00:00 2001 From: Guy Podjarny Date: Fri, 22 Apr 2016 01:09:22 +0700 Subject: [PATCH] Add a `Security` section & snyk Added security section: The importance of having developers embrace security is growing, and I believe every (awesome) list of this nature should have a security section enumerating security tools. Added snyk: I kicked off the section with snyk, which holds your hand through finding vulnerable npm dependencies and fixing them through guided upgrades or patches, as well as adding that to your build so you don't accidentally add vulnerable dependencies later on. It's worth noting that while Snyk is a company, the client & vulnerability DB is open source (https://github.com/Snyk/vulndb), and the testing & patching functionality is forever free. Full disclosure: I'm a part of the Snyk team, on a mission to help make open source more secure! ;) Closes #491 --- readme.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/readme.md b/readme.md index 818bd1e..e383b3e 100644 --- a/readme.md +++ b/readme.md @@ -41,6 +41,7 @@ - [Network](#network) - [Database](#database) - [Testing](#testing) + - [Security](#security) - [Benchmarking](#benchmarking) - [Minifiers](#minifiers) - [Authentication](#authentication) @@ -571,6 +572,11 @@ - [testen](https://github.com/egoist/testen) - Run tests for multiple versions of Node.js locally with NVM. +### Security + +- [snyk](https://github.com/Snyk/snyk) - CLI and build-time tool to find & fix vulnerable npm dependencies. + + ### Benchmarking - [Benchmark.js](http://benchmarkjs.com) - A robust benchmarking library that works on nearly all JavaScript platforms, supports high-resolution timers, and returns statistically significant results.