Dependency Vulnerability Alert

@snippbot/hook-dep-vuln-alert ORG

hook

Hook that triggers when dependency files change (package.json, requirements.txt, Cargo.toml, go.mod). Scans updated dependencies against known vulnerability databases and alerts on HIGH/CRITICAL CVEs.

security dependencies vulnerability supply-chain hook

Install

$ snippbot marketplace install @snippbot/hook-dep-vuln-alert

Hooks (1)

pkg__snippbot__file.changed

Scan changed dependency files for HIGH/CRITICAL CVEs and alert

Versions (1)

1.0.0

0 downloads 2026-05-29