The latest articles on DEV Community by Zuhair Halawa (@zuhairhalawa). https://dev.to/zuhairhalawa https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4209399%2Fb9d22ffb-31b3-4442-81df-597434be8763.png https://dev.to/zuhairhalawa en Zuhair Halawa Mon, 26 Oct 2026 19:06:02 +0000 https://dev.to/zuhairhalawa/advisoryguard-catch-accidental-data-loss-when-editing-security-advisories-3eg7 https://dev.to/zuhairhalawa/advisoryguard-catch-accidental-data-loss-when-editing-security-advisories-3eg7 <p>I ran into an issue while correcting a GitHub security advisory: the package name was fixed, but the edited record lost its CVSS severity metadata.</p> <p>So I built AdvisoryGuard, a small open-source TypeScript CLI that validates OSV JSON and compares advisory records before and after an edit.</p> <p>It flags removed CVSS entries, changed affected-version ranges, missing references, and other metadata changes worth reviewing.</p> <p>It works offline, never modifies your files, and requires no API keys.</p> <p>npx advisoryguard diff before.json after.json</p> <p>The README includes an animated demo using the real CLI.</p> <p>GitHub: <a href="https://github.com/zuhairhalawa/AdvisoryGuard" rel="noopener noreferrer">https://github.com/zuhairhalawa/AdvisoryGuard</a></p> <p>Feedback on edge cases or advisory formats would be particularly useful.</p> <h1> showdev #opensource #security #typescript </h1> showdev opensource security typescript