@nodesecure/cli/src/http-server/endpoints/ossf-scorecard.js

Node.js security CLI

// Import Third-party Dependencies
import * as scorecard from "@nodesecure/ossf-scorecard-sdk";
import send from "@polka/send-type";

export async function get(req, res) {
  const { org, pkgName } = req.params;
  const { platform = "github.com" } = req.query;

  try {
    const data = await scorecard.result(`${org}/${pkgName}`, {
      resolveOnVersionControl: Boolean(process.env.GITHUB_TOKEN),
      resolveOnNpmRegistry: false,
      platform
    });

    return send(res, 200, {
      data
    });
  }
  catch (error) {
    return send(
      res,
      error.statusCode ?? 404,
      { error: error.statusMessage ?? "Not Found" }
    );
  }
}