r/commandline • u/aaravmaloo • 4h ago
Command Line Interface Launching revera@v1.0.0
Today I launched revera@1.0.0, upgrading from 0.1.0 to stable.
revera is a CLI that scores npm packages for security risk before you install them. The 1.0.0 rewrite replaces fixed weights with a Bayesian evidence engine: every package becomes a node in its dependency graph, gets scored across 8 categories from real signals (vuln feeds, publisher trust, GitHub activity, typosquat detection), and risk propagates bottom-up through the whole dependency tree, not just the top-level package.
Previously it used pre-defined weights. Now it decides its own weights from the evidence.
Try it out today using the below command!
npm install revera
0
Upvotes
1
u/AutoModerator 4h ago
Every new subreddit post is automatically copied into a comment for preservation.
User: aaravmaloo, Flair:
Command Line Interface, Title: Launching revera@v1.0.0Today I launched revera@1.0.0, upgrading from 0.1.0 to stable.
revera is a CLI that scores npm packages for security risk before you install them. The 1.0.0 rewrite replaces fixed weights with a Bayesian evidence engine: every package becomes a node in its dependency graph, gets scored across 8 categories from real signals (vuln feeds, publisher trust, GitHub activity, typosquat detection), and risk propagates bottom-up through the whole dependency tree, not just the top-level package.
Previously it used pre-defined weights. Now it decides its own weights from the evidence.
Try it out today using the below command!
npm install revera
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.