mix_audit

1.0.0

2.1.5 2.1.4 2.1.3 2.1.2 2.1.1 2.1.0 2.0.2 2.0.1 2.0.0 1.0.1 1.0.0 0.1.4 0.1.3 0.1.2 0.1.1 0.1.0 0.0.6 0.0.5 0.0.4 0.0.3 0.0.2 0.0.1

MixAudit provides a `mix deps.audit` task to scan a project Mix dependencies for known Elixir security vulnerabilities

HexDocs

Current section

Files

Jump to

Readme 22 Versions 2 Dependencies Dependants Files Activity

mix_audit lib mix_audit advisory.ex

Raw

lib/mix_audit/advisory.ex

defmodule MixAudit.Advisory do
  @derive Jason.Encoder
  defstruct id: nil,
            package: nil,
            disclosure_date: nil,
            cve: nil,
            url: nil,
            title: nil,
            description: nil,
            patched_versions: [],
            unaffected_versions: []
end

Search filters

Type any of these into the search box. They can be combined with free text which searches package names and descriptions.

Operator	Description	Example
name:	Match package name. Supports * wildcards and repo/package form	name:phx* or name:hexpm/phoenix
description:	Full-text search of package descriptions	description:auth
depends:	Packages depending on a given package. Supports repo:package form	depends:ecto or depends:hexpm:ecto
build_tool:	Filter by build tool	build_tool:mix
updated_after:	Packages updated after an ISO8601 datetime	updated_after:2025-01-01T00:00:00Z
extra:	Match custom metadata (key,value). Nested keys are separated by commas	extra:license,MIT

Wrap values in double quotes to include spaces, e.g. name:"my package".