
MixAudit provides a mix deps.audit
task to scan Mix dependencies for security vulnerabilities.
Warning
⚠️ This project is currently under development, it is not ready for production use yet. ⚠️
Installation
Project dependency
Add mix_audit
to the deps
function in your project’s mix.exs
file:
defp deps do
[
…,
{:mix_audit, "~> 1.0", only: [:dev, :test], runtime: false}
]
end
Then run mix do deps.get, deps.compile
inside your project’s directory.
Local escript
If you do not wish to include mix_audit
in your application, you can install it as an escript
$ mix escript.install hex mix_audit
Usage
Project dependency
$ mix deps.audit <path>
Local escript
$ ./mix_audit <path>
License
MixAudit
is © 2020 Mirego and may be freely distributed under the New BSD license. See the LICENSE.md
file.
The detective hat logo is based on this lovely icon by Vectors Point, from The Noun Project. Used under a Creative Commons BY 3.0 license.
About Mirego
Mirego is a team of passionate people who believe that work is a place where you can innovate and have fun. We’re a team of talented people who imagine and build beautiful Web and mobile applications. We come together to share ideas and change the world.
We also love open-source software and we try to give back to the community as much as we can.