Skip to content

Add Gatsby lockfile example and verified case study#494

Open
Ayush7614 wants to merge 3 commits into
OWASP:mainfrom
Ayush7614:ayush7
Open

Add Gatsby lockfile example and verified case study#494
Ayush7614 wants to merge 3 commits into
OWASP:mainfrom
Ayush7614:ayush7

Conversation

@Ayush7614
Copy link
Copy Markdown
Contributor

Summary

  • Adds lockfile-only snapshot examples/gatsby/ from gatsbyjs/gatsby@1f38c85 (package.json + Yarn Classic yarn.lock).
  • Documents a verified baseline scan in website/docs/case-studies/gatsby.md (3,568 packages, 128 findings, yarn audit comparison).
  • Hosts the Gatsby monogram locally at website/static/img/gatsby-logo.svg so the case study image loads reliably on the docs site.
  • Includes full case study sections: Remaining risk, Baseline findings (128-row table), and Want your project reviewed?

Test plan

  • npm run build && node dist/index.js examples/gatsby --verbose --all — 128 findings (9 critical · 66 high · 42 medium · 11 low)
  • cd examples/gatsby && yarn audit — comparison numbers documented in case study
  • cd website && npm run build — Docusaurus build succeeds
  • Case study page loads with logo at /cve-lite-cli/docs/case-studies/gatsby

Made with Cursor

@Ayush7614
Copy link
Copy Markdown
Contributor Author

cc: @sonukapoor

Ayush7614 added 3 commits May 30, 2026 05:24
Snapshot gatsbyjs/gatsby Yarn Classic lockfile (3,568 packages, 128 findings)
with reproducible scan verification and yarn audit comparison docs.
Host the monogram SVG under website/static instead of a broken
raw.githubusercontent URL that returned 404.
Add Remaining risk, full 128-row Baseline findings, and Want your
project reviewed sections to match other case studies.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant