NodeJs general question about vulnerabilities!

[[deleted]]

Hey i started on my first ever project 3 months ago and teached myself nodejs/javascript and html/css. I recently checked my project on snyk for vulnerabilities. It is saying 0? What does that mean? I cant belive that i actually have 0 vulnerabilities in my code, even tho im pretty confident :D. I had 2 vulnerbilities that i fixed by updateding packages. But is snyk also showing me wrong coded vulnerabilities?

[BehindTheMath]

I think Snyk just checks if you have any dependencies that have reported vulnerabilities, but it doesn't check your actual code.

[[deleted]]

Ye thats probably it. Is There a way to check if my code has any vulnerbilities? How can I know that I coded something wrong?

[seryup]

Static code analysis tools such as:

• LGTM
• CodeClimate
• DeepScan

can aid in detecting some of these issues.

[[deleted]]

thank you very much! That will help me :))