NPM Security totals by depth0 package

npmSec

#!/usr/bin/env node
'use strict';
const {execSync} = require('child_process');
let result = {};
try {
	result = execSync(`npm audit --json --long`);
} catch (error) {
	const {stdout, stderr} = error;
	result = {stdout, stderr};
}


const data = JSON.parse(result.stdout.toString());

const vouln = {};

for (let i in data.advisories) {
	const {url, module_name, severity, findings} = data.advisories[i];
	for (let f of findings) {
		for (let path of f.paths) {
			const vPath = path.split('>');
			const name = vPath[0];
			if (!vouln[name]) vouln[name] = {};
			if (!vouln[name][severity]) vouln[name][severity] = [];
			let sev = vouln[name][severity];
			sev.push({
				url,
				path,
				version: f.version,
			});
		}
	}
}

let presentation = '';
for (let i in vouln) {
	let line = i + ' - ';
	for (let sev in vouln[i]) {
		line += `${sev}:${vouln[i][sev].length} `;
	}
	presentation += line + '\n';
}
console.log(presentation);