From ff5120c7b7982e94b06db741bfd5e8afe6404f04 Mon Sep 17 00:00:00 2001 From: Sonu Kapoor Date: Mon, 18 May 2026 14:00:00 -0400 Subject: [PATCH 1/2] docs: add languages and package managers visual section to README Adds an icon grid near the top of the README showing supported languages (JavaScript, TypeScript) and package managers (npm, pnpm, Yarn, Bun) using devicon and simpleicons logos at 48px with labels, matching the visual pattern recommended by OWASP reviewer feedback. Closes #370 --- README.md | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) diff --git a/README.md b/README.md index a905bb7..6404388 100644 --- a/README.md +++ b/README.md @@ -47,6 +47,32 @@ --- +
+ +**Languages** + + + + + + +
JavaScript
JavaScript		TypeScript
TypeScript
+ +**Package Managers** + + + + + + + + +
npm
npm		pnpm
pnpm		Yarn
Yarn		Bun
Bun
+ +
+ +--- + ## The problem with how security scanning works today Most security tooling is designed around pipelines, not people. From 545e0a8eefc11faf0fb5a7a97e2276297672b087 Mon Sep 17 00:00:00 2001 From: Sonu Kapoor Date: Mon, 18 May 2026 14:30:00 -0400 Subject: [PATCH 2/2] =?UTF-8?q?docs:=20remove=20Languages=20section=20?= =?UTF-8?q?=E2=80=94=20show=20package=20managers=20only?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit CVE Lite CLI scans lockfiles, not JS/TS source code. Showing JavaScript and TypeScript as supported languages implied SAST-style analysis. Package managers (npm, pnpm, Yarn, Bun) are the accurate scope signal. --- README.md | 9 --------- 1 file changed, 9 deletions(-) diff --git a/README.md b/README.md index 6404388..34be67e 100644 --- a/README.md +++ b/README.md @@ -49,15 +49,6 @@
-**Languages** - - - - - - -
JavaScript
JavaScript		TypeScript
TypeScript
- **Package Managers**