You must be logged in to sponsor sonukapoor
Become a sponsor to Sonu Kapoor
Hi, I'm Sonu Kapoor - the creator of CVE Lite CLI, an open source dependency vulnerability scanner for JavaScript and TypeScript projects.
CVE Lite CLI is an OWASP Lab Project used by developers across fintech, government agencies, and open source teams in 10+ countries. It scans npm, pnpm, Yarn, and Bun lockfiles locally, shows you exactly which dependencies are vulnerable, and gives you copy-and-run fix commands - not just a list of problems.
Most tools tell you what's broken. CVE Lite CLI tells you what to run.
What your sponsorship funds:
- Ongoing development and new features
- Research and case studies on real-world vulnerability patterns
- Community support and issue response
- Infrastructure and tooling costs
Every sponsor helps keep this project free, maintained, and improving. Thank you for supporting open source security tooling.
1 sponsor has funded sonukapoor’s work.