AdvisoryGuard — Catch accidental data loss when editing security advisories
I ran into an issue while correcting a GitHub security advisory: the package name was fixed, but the edited record lost its CVSS severity metadata. So I built AdvisoryGuard, a small open-source TypeScript CLI that validates OSV JSON and compares advisory records before and after an edit. It flags removed CVSS entries, changed affected-version ranges, missing references, and other metadata changes…
We haven't written up this one. Dev.to has the full story — the link below goes straight to it.