node-ipc cve check

simple-cve-check.js

// /usr/local/bin/node

const fs = require('fs');

const blackList = [{
    name: 'node-ipc',
    affectingVersion: '>=10.1.1 <10.1.3',
}];

const packages = fs.readdirSync('./node_modules');

const dangerList = [];

blackList.forEach(item => {
    if (packages.includes(item.name)) {
        dangerList.push(item);
    }
});

if (dangerList.length) {
    console.error(`危险包存在，请检查是否为受影响版本: 共${dangerList.length}个`);
    dangerList.forEach(item => {
        console.error(`${item.name}: 受影响版本 ${item.affectingVersion}`);
    });
} else {
    console.log('检测无毒');
}