/lameR

Lame and slow way to check R packages for vulnerabilities

Primary LanguagePython

lameR

Lame and slow way to check R packages for vulnerabilities

Screenshot 2023-03-29 at 08 51 35

This script will check R package or list of R packages on ossindex.sonatype.org. It will report if a package has vulnerabilities, regardless of the version. Is will also report if package was not found on ossindex so you can do manual checks on cran or google. Inspired by oysteR but, generally speaking, slower and lamer way to do the same thing.

The only advantage is that we don't have to install R or any of the packages to perform these checks.

We don't have to sign up for the ossindex.sonatype.org because we're taking it slow and going below the rate limiting.

Example Usage:

Check a single package:

python lameR.py package_name

Check a lisf of packages:

python lameR.py -f /path/to/package/list

Example Results

Screenshot 2023-03-29 at 08 53 37