Collect npm

[pombredanne]

See https://registry.npmjs.org/-/npm/v1/security/advisories

[NavonilDas]

Can I contribute to this issue?

Here is the current format of the data.

{
            "id": 1,
            "created": "2015-10-17T19:41:46.382Z",
            "updated": "2019-06-14T23:28:58.506Z",
            "deleted": null,
            "title": "Arbitrary JavaScript Execution",
            "found_by": {
                "name": "Jarda Kotěšovec"
            },
            "reported_by": {
                "name": "Jarda Kotěšovec"
            },
            "module_name": "bassmaster",
            "cves": [
                "CVE-2014-7205"
            ],
            "vulnerable_versions": "<=1.5.1",
            "patched_versions": ">=1.5.2",
            "overview": "A vulnerability exists in bassmaster <= 1.5.1 that allows for an attacker to provide arbitrary JavaScript that is then executed server side via eval.",
            "recommendation": "Update to bassmaster version 1.5.2 or greater.",
            "references": "- [Commit #b751602](https://github.com/hapijs/bassmaster/commit/b751602d8cb7194ee62a61e085069679525138c4)",
            "access": "public",
            "severity": "critical",
            "cwe": "CWE-94",
            "metadata": {
                "module_type": "Network.Library",
                "exploitability": 10,
                "affected_components": ""
            },
            "url": "https://npmjs.com/advisories/1"
        }

We can get the following data:

1. Package Name
2. Status
3. Fixed Version
4. Description
5. Severity
6. Vulnerability id

[pombredanne]

@NavonilDas that would be awesome! can join join the chat at https://gitter.im/aboutcode-org/vulnerablecode ?