Developer Builds Free Node.js Tool to Automate Daily Vulnerability Checks in 5 Minutes

·3 views

A developer has published a tutorial detailing how to build 'sec-watch', a roughly 600-line Node.js script that automates morning security checks for Cisco, Windows, and VMware environments. The tool consolidates data from the CISA Known Exploited Vulnerabilities catalog, Microsoft's MSRC patch feed, and Cisco's recommended software releases into a single dated HTML report. It requires no npm dependencies and runs on Node.js version 20 or higher, making it lightweight and easy to deploy. The script is designed to answer three key questions each morning: whether any tracked product is actively being exploited, what the latest Patch Tuesday covered, and whether Cisco software versions have drifted from recommended releases. A notable feature is its use of exit codes to signal to the scheduler whether any action is required, reducing the need for manual review.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Anthropic's Claude AI Service Experiences Outage

Claude, the AI assistant developed by Anthropic, experienced a service outage that left users unable to access the platform. The incident was officially tracked and acknowledged on Anthropic's status page. The outage drew significant attention on Hacker News, accumulating 85 upvotes and 47 comments from the tech community. No specific cause or estimated resolution time was publicly detailed in the available information.

0 comments Read more at Hacker News

ProgrammingDEV Community ·

A Decade in Software Engineering: Key Lessons From Banking, Gov and Tech Projects

A full-stack software engineer with ten years of experience reflects on lessons learned while building systems for a bank, Georgia's Ministry of Healthcare, major online marketplaces, and an international reinsurance platform. The engineer argues that mastering fundamentals like HTTP, database indexing, and problem modelling outlasts any specific framework, as tools are routinely replaced across the industry. Most serious performance issues encountered across sectors traced back to data problems — poor indexing, inefficient queries, or poorly designed schemas — rather than frontend or application logic. Breadth as a full-stack developer proved valuable not for technical superiority in any one area, but for the ability to trace problems across an entire system and resolve disputes between siloed teams. The engineer also highlights that reading and understanding unfamiliar codebases is a critical but underrated skill rarely taught formally, yet essential in real-world engineering roles.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Claude Fable 5 vs GPT-4o: Which Model Writes Better TypeScript Code?

A developer and AI systems architect ran head-to-head TypeScript code generation tests on Claude Fable 5 and GPT-4o using identical prompts and a three-part rubric covering compilation, strict mode compliance, and error handling. Claude Fable 5 performed better with generics, utility types, and async error boundaries, consistently producing output that passed strict TypeScript mode with minimal edits. GPT-4o handled simple and intermediate type inference reliably but struggled with advanced patterns like conditional types and heavily generic helpers. Both models occasionally missed exhaustiveness checks on discriminated unions, a gap the tester flagged as requiring manual human review. The key takeaway is that each model has distinct failure modes, and choosing the right one depends on the complexity and patterns specific to the project being built.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Optimajet Rebuilds Workflow Engine Docs to Let AI Coding Agents Integrate .NET Library

Optimajet has overhauled the documentation for its embeddable .NET workflow library, Workflow Engine, with AI coding agents specifically in mind. The new docs at docs.workflowengine.io publish their full text as a single file so agents can read everything in one request, reducing the guesswork that leads to hallucinated API calls. A dedicated endpoint also allows agents to obtain a trial license key autonomously, removing the human-in-the-loop bottleneck that previously stalled automated evaluations. The documentation spans 57 pages across four sections, and a separate API reference at api.workflowengine.io covers all 20 packages in the library. Workflow Engine is commercial software shipping since 2014, supports .NET Framework 4.6.2 and above, and works with major databases including PostgreSQL, SQL Server, and MongoDB; its latest stable release is version 22.0.0, dated July 16, 2026.

0 comments Read more at DEV Community