Security and integrity checker for JavaScript dependencies

Abstract

Nowadays, most of web-based software includes heavy usage of external dependencies. However, the control over the security aspects of these dependencies is out of control of the developers, because dependency injectors do not check for the security or integrity. Thus, the software built on top of insecure dependencies become vulnerable too. We propose a novel solution by using the PumaScript meta-programming framework and browser capabilities to generate a safe JavaScript dependency injector that help in generation of software solutions less vulnerable.