Security Audit Weekly已精选
Weekly npm audit scan, triage vulnerabilities by severity, and propose or apply safe patches.
基本信息
分类
维护
目标
deliver a weekly npm audit summary with a remediation plan.
检查命令
npm audit --json
退出条件
summary is posted with prioritized fixes.
支持的智能体
Claude Code
启动提示词
/loop 7d Start the "Security Audit Weekly" loop.
Goal: deliver a weekly npm audit summary with a remediation plan.
Between iterations run: npm audit --json
Exit when: summary is posted with prioritized fixes.
Step 1: Run npm audit, triage by severity, and propose safe remediation steps.步骤
- 1
Run npm audit
Run npm audit and capture critical, high, and moderate findings.
npm audit --json - 2
Triage findings
Group vulnerabilities by severity and exploitability. Flag dev-only vs production exposure.
- 3
Propose fixes
Recommend npm audit fix, targeted overrides, or dependency bumps. Note breaking changes.
更多 维护 相关内容
Docs Sync After Edits
After code changes, find affected docs and update README, API references, and inline comments to match.
Knip Until Clean
Find and remove dead exports, unused files, and orphan dependencies — loop until knip reports clean.
Dependency Audit Weekly
Weekly loop to check outdated dependencies, propose safe upgrades, and open a summary.
Dependency Upgrade One-by-One
Upgrade a single outdated package per iteration, fix breakages, and commit — safer than bulk npm update.
评论