AdvisoryGuard — Catch accidental data loss when editing security advisories

Description and use

AdvisoryGuard is an open-source TypeScript CLI that validates OSV JSON and compares advisory records before and after an edit. It flags removed CVSS entries, changed affected-version ranges, missing references, and other metadata changes for review. It runs offline, never modifies files, and needs no API keys.

Problem

When correcting a GitHub security advisory, a package name fix can accidentally erase CVSS severity metadata, affected-version ranges, references, and other metadata that should be preserved.

Outcome

AdvisoryGuard catches accidental data loss during security advisory edits by comparing OSV JSON records before and after an edit, flagging removed CVSS entries, changed affected-version ranges, missing references, and other metadata changes for review.

Workflow

• Run npx advisoryguard diff before.json after.json to compare two OSV JSON advisory records.
• Review flagged changes including removed CVSS entries, changed affected-version ranges, missing references, and other metadata changes.
• Confirm or revert the edit based on the review.

Evidence

I ran into an issue while correcting a GitHub security advisory: the package name was fixed, but the edited record lost its CVSS severity metadata.

Source

So I built AdvisoryGuard, a small open-source TypeScript CLI that validates OSV JSON and compares advisory records before and after an edit.

Source

It flags removed CVSS entries, changed affected-version ranges, missing references, and other metadata changes worth reviewing.

Source

It works offline, never modifies your files, and requires no API keys.

Source

npx advisoryguard diff before.json after.json

Source