mix_audit

0.0.4

2.1.5 2.1.4 2.1.3 2.1.2 2.1.1 2.1.0 2.0.2 2.0.1 2.0.0 1.0.1 1.0.0 0.1.4 0.1.3 0.1.2 0.1.1 0.1.0 0.0.6 0.0.5 0.0.4 0.0.3 0.0.2 0.0.1

MixAudit provides a `mix deps.audit` task to scan a project Mix dependencies for known Elixir security vulnerabilities

HexDocs

Current section

Files

Jump to

Readme 22 Versions 1 Dependency Dependants Files Activity

mix_audit lib mix tasks deps audit.ex

Raw

lib/mix/tasks/deps/audit.ex

defmodule Mix.Tasks.Deps.Audit do
  use Mix.Task

  @shortdoc "Scan for security vulnerabilities in Mix dependencies"

  @doc false
  defdelegate run(args), to: MixAudit, as: :scan

  @doc false
  defdelegate main(args), to: MixAudit, as: :scan
end

Search filters

Type any of these into the search box. They can be combined with free text which searches package names and descriptions.

Operator	Description	Example
name:	Match package name. Supports * wildcards and repo/package form	name:phx* or name:hexpm/phoenix
description:	Full-text search of package descriptions	description:auth
depends:	Packages depending on a given package. Supports repo:package form	depends:ecto or depends:hexpm:ecto
build_tool:	Filter by build tool	build_tool:mix
updated_after:	Packages updated after an ISO8601 datetime	updated_after:2025-01-01T00:00:00Z
extra:	Match custom metadata (key,value). Nested keys are separated by commas	extra:license,MIT

Wrap values in double quotes to include spaces, e.g. name:"my package".