Back to feed
Dev.to
Dev.to
5/20/2026
Score Any CVSS Vector Offline - v3.1 and v4.0, Zero Dependencies

Score Any CVSS Vector Offline - v3.1 and v4.0, Zero Dependencies

Short summary

A 4KB, zero-dependency JavaScript library scores CVSS v3.1 and v4.0 vulnerability vectors entirely offline with no network calls or API requirements. Use cases include CI/CD gates that fail builds on high-severity CVEs, Jira auto-prioritization, and embedded interactive calculators. MIT licensed, npm-ready, tested against official FIRST specs.

  • •4KB zero-dependency library for CVSS v3.1 and v4.0 vulnerability scoring
  • •Works entirely offline—no network calls, APIs, or external dependencies required
  • •Ready-to-use in CI/CD pipelines, Jira integrations, and interactive web components

Generated with AI, which can make mistakes.

#product-launch#open-source
Read full article at Dev.to

Is this a good recommendation for you?

Explore more

Proof-of-Commitment Internals: How the Scoring Algorithm Works
Dev.to
The Patch-Velocity Gap: AI Discovery Is Outpacing OSS Patching
Dev.to
I Built a Privacy-First Calculator Platform With Zero Tracking — Here's the Architecture
Dev.to
AI Is Breaking Two Vulnerability Cultures — And Vibe Coders Are About to Get Caught in the Middle
Dev.to