No vulnerable libraries (
webhint uses Snyk’s Vulnerability DB to lookup known
Why is this important?
Making sure your website dependencies are free of known vulnerabilities is important in preventing malicious attacks such as cross-site scripting attacks that can be used to compromise web site information.
What does the hint check?
The vulnerability database is updated automatically from Snyk if the cached content is older than 24h.
Can the hint be configured?
You can configure the minimum severity to report in the
severity possible values are:
If you configure this hint to
webhint only finds
medium vulnerabilities, no issues will be raised.
How to use this hint?
This package is installed automatically by webhint:
npm install hint --save-dev
To use it, activate it via the
.hintrc configuration file:
Note: The recommended way of running webhint is as a