VulnerableCode is a free and open database of FOSS software package vulnerabilities and the tools to create and keep the data current.

It is made by the FOSS community to improve and secure the open source software ecosystem.

git clone https://github.com/nexB/vulnerablecode.git && cd vulnerablecode
make envfile
docker-compose build
docker-compose up
docker-compose run vulnerablecode ./manage.py import --list

At this point, the VulnerableCode app should be running at port 8000 on your Docker host.

sudo apt-get install \
    python3-venv python3-dev postgresql libpq-dev build-essential
git clone https://github.com/nexB/vulnerablecode.git && cd vulnerablecode
make dev envfile postgres
make test
make run

At this point, the VulnerableCode app should be running at port 8000 on your machine.

To run all importers and improvers use:

./manage.py import --all
./manage.py improve --all

Read more about VulnerableCode here: https://vulnerablecode.readthedocs.org/