securelens-backend/.github/ISSUE_TEMPLATE/dependency_auditor.md

name, about, title, labels, assignees

name	about	title	labels	assignees
Feature: Dependency Lockfile Auditor	Template for scanning package files against the OSV database.	Feature: Dependency Lockfile Auditor (securelens audit)	help wanted enhancement good first issue

Description

We want to expand the CLI tool's capabilities to scan project dependencies for known vulnerabilities.

Goal

Add a new CLI command securelens audit <path> that scans package descriptors (such as requirements.txt or package.json) and runs checks against the Open Source Vulnerability (OSV.dev) database API.

Requirements

1. Parse common package files to extract dependency names and versions.
2. Submit query requests to the OSV API (https://api.osv.dev/v1/query).
3. Format the results in a clear CLI table using rich showing packages, affected versions, and severity.