diff --git a/README.md b/README.md index 4605a74..29ec89f 100644 --- a/README.md +++ b/README.md @@ -174,22 +174,16 @@ CVE Lite CLI is designed as a **local-first, metadata-only** scanner. Unlike tra - **fast, low-friction workflow** Run it locally against a project without adopting a large security platform. - - **practical remediation guidance** It does not stop at raw advisory output. It highlights top-priority fixes and suggests a fix plan. - - **direct vs transitive visibility** The output makes it easier to see whether the risk comes from something you installed directly or from a nested package. - - **developer-first** It is optimized for developers working with npm, pnpm, and Yarn lockfiles. - - **budget-friendly** It is intended for developers and teams who want useful security checks without paying for a large commercial product. - - **local-first** It reads your project locally and uses package/version matching against OSV advisories. - - **release-focused** It is especially useful before a release, in CI, or during final dependency cleanup.