Is it vulnerable
Security and privacy
vulnerability scanning
SHOW HN2015
How HN took it
6 positive, 12 neutral or asking, 2 mixed, 8 critical, out of 28 comments about the project. Thread score -0.06.
Design: 1 for, 5 againstIdea: 4 for, 0 againstExecution: 1 for, 0 againstPrivacy: 0 for, 1 againstPerformance: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Simple, fast and useful
From 2 comments
This is terrific. Easy to understand, fast, and very useful. Great job, guys!
bshimmin on HNTHANK YOU! I think this is really awesome... ...I have to go update a few projects right now.
busterarm on HN
Useful build check idea
From 1 comment
This is pretty awesome, thanks! Can't wait for a GitHub integration and a badge to paste on the app readme. Seems like an excellent build check.
boie0025 on HN
Objections
Installing a service monitor on servers raises privacy concerns
From 2 comments
Really nice and straightforward. Although I'm worried about the part where I'm supposed to install a service monitor on our servers. I know, many people already do stuff like…
bhaak on HNSending data from your server to a third party is something many people are not comfortable with. In environments with tighter security needs, this is outright verboten. It is…
bhaak on HN
Some reported severities are overstated
From 1 comment
Someone should reestimate severity of those "CVEs". I got 10 warnings and none of them is any severe for my app(and yours too, likely), so I'm definitely not vulnerable. Also LOL…
homakov on HN
Page text overlaps and renders poorly in some browsers
From 3 comments
Great tool! Bookmarked. Bug report: text here [1] is not rendering properly, but if I resize the window to be smaller it adjusts and is fine. Happens in Firefox 39.0.3 (no…
brobinson on HNLooks great. Your formatting on the result page is messed up in my browser (chrome on osx). You can see a screen shot here...…
dboyd on HNFWIW, The font spacing is too tight to the point of overlapping text on my browser (firefox 39, linux)
aidenn0 on HN
Requests
Support package.json and bower files
From 1 comment
This is awesome, great idea! I see the sign-up for additional platforms. Thinking of supporting package.json and bower files?
thoughtpalette on HN
Offer an API or CI integration
From 3 comments
I think developers could use way better security tooling. It seems like a lot of people would love to have an easy way to integrate this into their continuous integration…
phillmv on HNReally nice and straightforward. Although I'm worried about the part where I'm supposed to install a service monitor on our servers. I know, many people already do stuff like…
bhaak on HNVery nice and simple. Maybe you can expose this as a public API too?
NateLawson on HN
Subscription email alerts
From 1 comment
How about a subscription service? Email me as soon as my installed gems are getting vulnerable.
cstuder on HN
Questions
What is a Gemfile.lock?
From 1 comment
I guess the presentation is pretty clean. But what's a gemfile.lock?
recursive on HN
Is there a Python equivalent to ruby-advisory-db?
From 1 comment
I'd like to know if there is something similar for Python, or something like https://github.com/rubysec/ruby-advisory-db for Python.
caioariede on HN
Alternatives named
bundler-audit
From 1 comment
You can run this check yourself using the bundle-audit tool. It uses the list of vulnerabilities from ruby-advisory-db. Checking the git history, I see that phillmv is a…
sciurus on HN
Gemnasium
From 1 comment
Gemnasium.com offers this. (as does OP, see sibling comment)
bdcravens on HN
SensioLabs security checker for PHP
From 1 comment
If you're into PHP, SensioLabs has a similar service you can use in your Composer.lock file: https://security.sensiolabs.org/check It'll block any vulnerable version of a…
Mojah on HN
requires.io
From 1 comment
https://requires.io/
aaronbasssett on HN