Sentinello
Sentinello is a self-hosted, open-source dependency-vulnerability monitoring tool specifically built for Node.js portfolios. By pointing the tool at your repositories, you can manage a single triage queue for known CVEs detected across every project in your ecosystem, centralizing CVE monitoring and triage for multi-repository Node.js setups.
Gallery
FAQ
Sentinello is a self-hosted, open-source dependency-vulnerability monitoring tool specifically built for Node.js portfolios. By pointing the tool at your repositories, you can manage a single triage queue for known CVEs detected across every project in your ecosystem, centralizing CVE monitoring and triage for multi-repository Node.js setups.
Discussion
Sentinello looks genuinely useful — the Developer Tools space needed this. qq: does it scale cleanly for bigger teams, or is there a performance hit to watch out for? Congrats on shipping 👏
@vikram great question — it stays light even on large workspaces; nothing extra to configure. Appreciate you checking it out!
@sentinello great to know, appreciate the transparency 🙌
The Node.js CVE Monitoring angle is the part that got me — feels way cleaner than what's out there. For an existing setup, how granular can you get about what you expose? Congrats on shipping.
@sanjay thank you! you can scope it as tightly as you want — per project, per workspace, your call.