Node.js Dependency Security on Hetzner VPS Hetzner
Scan Node.js dependencies for CVEs on Hetzner Cloud servers. Keep npm packages secure on self-hosted infrastructure.
Node.js security on Hetzner
Run npm audit or OSV Scanner as part of your deployment process on Hetzner VPS.
# Add to your deploy script on Hetzner VPS cd /var/www/myapp npm audit --audit-level=high # Or use OSV Scanner curl -L https://github.com/google/osv-scanner/releases/latest/download/osv-scanner_linux_amd64 -o osv-scanner chmod +x osv-scanner ./osv-scanner --lockfile=package-lock.json
✓ Manual Scan
For a quick one-off scan before deployment, paste your package.json into PackageFix — no pipeline setup needed.
Scan your dependencies now — paste your manifest, get a fixed version back in seconds.
Open PackageFix →No signup · No CLI · No GitHub connection · Runs 100% in your browser
Frequently Asked Questions
How do I add dependency scanning to Hetzner?
Add OSV Scanner or the ecosystem-specific audit tool to your Hetzner build configuration. The config snippet above works out of the box.
Does PackageFix integrate with CI/CD pipelines?
PackageFix is a browser tool for manual scans. For automated CI scanning, use OSV Scanner (Google) or pip-audit/npm audit in your pipeline. PackageFix generates the Renovate config and GitHub Actions workflow you can copy.
How do I fail a Hetzner build on critical CVEs?
Add --audit-level=critical to npm audit, or --fail-on=critical to pip-audit. The pipeline aborts if critical CVEs are found.
What is the OSV Scanner?
OSV Scanner is Google's open-source CLI tool that queries the same OSV database PackageFix uses. It's ideal for CI/CD integration.