@nebutra/next-unicorn-skill 2.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (119) hide show
  1. package/CHANGELOG.md +57 -0
  2. package/LICENSE +21 -0
  3. package/README.md +316 -0
  4. package/SKILL.md +318 -0
  5. package/dist/analyzer/pattern-catalog.d.ts +35 -0
  6. package/dist/analyzer/pattern-catalog.d.ts.map +1 -0
  7. package/dist/analyzer/pattern-catalog.js +342 -0
  8. package/dist/analyzer/pattern-catalog.js.map +1 -0
  9. package/dist/analyzer/scanner.d.ts +33 -0
  10. package/dist/analyzer/scanner.d.ts.map +1 -0
  11. package/dist/analyzer/scanner.js +302 -0
  12. package/dist/analyzer/scanner.js.map +1 -0
  13. package/dist/auditor/ux-auditor.d.ts +26 -0
  14. package/dist/auditor/ux-auditor.d.ts.map +1 -0
  15. package/dist/auditor/ux-auditor.js +272 -0
  16. package/dist/auditor/ux-auditor.js.map +1 -0
  17. package/dist/checker/peer-dependency-checker.d.ts +62 -0
  18. package/dist/checker/peer-dependency-checker.d.ts.map +1 -0
  19. package/dist/checker/peer-dependency-checker.js +94 -0
  20. package/dist/checker/peer-dependency-checker.js.map +1 -0
  21. package/dist/index.d.ts +78 -0
  22. package/dist/index.d.ts.map +1 -0
  23. package/dist/index.js +325 -0
  24. package/dist/index.js.map +1 -0
  25. package/dist/planner/migration-planner.d.ts +47 -0
  26. package/dist/planner/migration-planner.d.ts.map +1 -0
  27. package/dist/planner/migration-planner.js +144 -0
  28. package/dist/planner/migration-planner.js.map +1 -0
  29. package/dist/pr-creator/git-operations.d.ts +29 -0
  30. package/dist/pr-creator/git-operations.d.ts.map +1 -0
  31. package/dist/pr-creator/git-operations.js +10 -0
  32. package/dist/pr-creator/git-operations.js.map +1 -0
  33. package/dist/pr-creator/platform-client.d.ts +47 -0
  34. package/dist/pr-creator/platform-client.d.ts.map +1 -0
  35. package/dist/pr-creator/platform-client.js +9 -0
  36. package/dist/pr-creator/platform-client.js.map +1 -0
  37. package/dist/pr-creator/pr-description-builder.d.ts +23 -0
  38. package/dist/pr-creator/pr-description-builder.d.ts.map +1 -0
  39. package/dist/pr-creator/pr-description-builder.js +187 -0
  40. package/dist/pr-creator/pr-description-builder.js.map +1 -0
  41. package/dist/pr-creator/pr-executor.d.ts +30 -0
  42. package/dist/pr-creator/pr-executor.d.ts.map +1 -0
  43. package/dist/pr-creator/pr-executor.js +109 -0
  44. package/dist/pr-creator/pr-executor.js.map +1 -0
  45. package/dist/pr-creator/pr-strategy.d.ts +56 -0
  46. package/dist/pr-creator/pr-strategy.d.ts.map +1 -0
  47. package/dist/pr-creator/pr-strategy.js +125 -0
  48. package/dist/pr-creator/pr-strategy.js.map +1 -0
  49. package/dist/schemas/input.schema.d.ts +231 -0
  50. package/dist/schemas/input.schema.d.ts.map +1 -0
  51. package/dist/schemas/input.schema.js +159 -0
  52. package/dist/schemas/input.schema.js.map +1 -0
  53. package/dist/schemas/output.schema.d.ts +2543 -0
  54. package/dist/schemas/output.schema.d.ts.map +1 -0
  55. package/dist/schemas/output.schema.js +199 -0
  56. package/dist/schemas/output.schema.js.map +1 -0
  57. package/dist/scorer/impact-scorer.d.ts +45 -0
  58. package/dist/scorer/impact-scorer.d.ts.map +1 -0
  59. package/dist/scorer/impact-scorer.js +243 -0
  60. package/dist/scorer/impact-scorer.js.map +1 -0
  61. package/dist/security/osv-client.d.ts +72 -0
  62. package/dist/security/osv-client.d.ts.map +1 -0
  63. package/dist/security/osv-client.js +36 -0
  64. package/dist/security/osv-client.js.map +1 -0
  65. package/dist/security/vuln-report-builder.d.ts +18 -0
  66. package/dist/security/vuln-report-builder.d.ts.map +1 -0
  67. package/dist/security/vuln-report-builder.js +141 -0
  68. package/dist/security/vuln-report-builder.js.map +1 -0
  69. package/dist/security/vulnerability-scanner.d.ts +65 -0
  70. package/dist/security/vulnerability-scanner.d.ts.map +1 -0
  71. package/dist/security/vulnerability-scanner.js +140 -0
  72. package/dist/security/vulnerability-scanner.js.map +1 -0
  73. package/dist/updater/changelog-verifier.d.ts +29 -0
  74. package/dist/updater/changelog-verifier.d.ts.map +1 -0
  75. package/dist/updater/changelog-verifier.js +80 -0
  76. package/dist/updater/changelog-verifier.js.map +1 -0
  77. package/dist/updater/registry-client.d.ts +49 -0
  78. package/dist/updater/registry-client.d.ts.map +1 -0
  79. package/dist/updater/registry-client.js +10 -0
  80. package/dist/updater/registry-client.js.map +1 -0
  81. package/dist/updater/update-plan-builder.d.ts +23 -0
  82. package/dist/updater/update-plan-builder.d.ts.map +1 -0
  83. package/dist/updater/update-plan-builder.js +93 -0
  84. package/dist/updater/update-plan-builder.js.map +1 -0
  85. package/dist/updater/update-policy.d.ts +50 -0
  86. package/dist/updater/update-policy.d.ts.map +1 -0
  87. package/dist/updater/update-policy.js +118 -0
  88. package/dist/updater/update-policy.js.map +1 -0
  89. package/dist/updater/update-scorer.d.ts +51 -0
  90. package/dist/updater/update-scorer.d.ts.map +1 -0
  91. package/dist/updater/update-scorer.js +166 -0
  92. package/dist/updater/update-scorer.js.map +1 -0
  93. package/dist/utils/constraint-filter.d.ts +44 -0
  94. package/dist/utils/constraint-filter.d.ts.map +1 -0
  95. package/dist/utils/constraint-filter.js +69 -0
  96. package/dist/utils/constraint-filter.js.map +1 -0
  97. package/dist/utils/serializer.d.ts +17 -0
  98. package/dist/utils/serializer.d.ts.map +1 -0
  99. package/dist/utils/serializer.js +24 -0
  100. package/dist/utils/serializer.js.map +1 -0
  101. package/dist/utils/skill-parser.d.ts +29 -0
  102. package/dist/utils/skill-parser.d.ts.map +1 -0
  103. package/dist/utils/skill-parser.js +175 -0
  104. package/dist/utils/skill-parser.js.map +1 -0
  105. package/dist/verifier/context7.d.ts +48 -0
  106. package/dist/verifier/context7.d.ts.map +1 -0
  107. package/dist/verifier/context7.js +97 -0
  108. package/dist/verifier/context7.js.map +1 -0
  109. package/examples/backend-node/input.json +28 -0
  110. package/examples/backend-node/output.json +343 -0
  111. package/examples/frontend-nextjs/input.json +37 -0
  112. package/examples/frontend-nextjs/output.json +302 -0
  113. package/package.json +78 -0
  114. package/templates/deletion-checklist.md +42 -0
  115. package/templates/migration-plan.md +61 -0
  116. package/templates/prd-template.md +123 -0
  117. package/templates/summary-table.md +28 -0
  118. package/templates/update-plan.md +61 -0
  119. package/templates/vuln-report.md +50 -0
package/package.json ADDED
@@ -0,0 +1,78 @@
1
+ {
2
+ "name": "@nebutra/next-unicorn-skill",
3
+ "version": "2.0.0",
4
+ "description": "Stop Vibe Coding debt: audit your codebase, replace reinvented wheels with unicorn-grade libraries, scan vulnerabilities, auto-update deps, and auto-create PRs — all verified via Context7 MCP.",
5
+ "type": "module",
6
+ "main": "dist/index.js",
7
+ "types": "dist/index.d.ts",
8
+ "exports": {
9
+ ".": {
10
+ "import": "./dist/index.js",
11
+ "types": "./dist/index.d.ts"
12
+ }
13
+ },
14
+ "files": [
15
+ "dist",
16
+ "SKILL.md",
17
+ "templates",
18
+ "examples",
19
+ "LICENSE",
20
+ "CHANGELOG.md"
21
+ ],
22
+ "keywords": [
23
+ "skill",
24
+ "mcp",
25
+ "ai-agent",
26
+ "claude-code",
27
+ "codebase-analysis",
28
+ "third-party-libraries",
29
+ "library-recommendations",
30
+ "dependency-optimization",
31
+ "migration-planning",
32
+ "hand-rolled-code",
33
+ "code-modernization",
34
+ "context7",
35
+ "impact-scoring",
36
+ "ux-audit",
37
+ "vulnerability-scanning",
38
+ "auto-update",
39
+ "pr-automation",
40
+ "technical-debt",
41
+ "vibe-coding",
42
+ "monorepo"
43
+ ],
44
+ "author": "TsekaLuk (https://github.com/TsekaLuk)",
45
+ "license": "MIT",
46
+ "repository": {
47
+ "type": "git",
48
+ "url": "https://github.com/TsekaLuk/Next-Unicorn-Skill.git"
49
+ },
50
+ "homepage": "https://github.com/TsekaLuk/Next-Unicorn-Skill#readme",
51
+ "bugs": {
52
+ "url": "https://github.com/TsekaLuk/Next-Unicorn-Skill/issues"
53
+ },
54
+ "engines": {
55
+ "node": ">=18"
56
+ },
57
+ "publishConfig": {
58
+ "access": "public",
59
+ "registry": "https://registry.npmjs.org"
60
+ },
61
+ "dependencies": {
62
+ "semver": "^7.7.4",
63
+ "zod": "^3.23.0"
64
+ },
65
+ "devDependencies": {
66
+ "@types/node": "^22.15.0",
67
+ "@types/semver": "^7.7.1",
68
+ "fast-check": "^4.4.0",
69
+ "typescript": "^5.7.0",
70
+ "vitest": "^4.0.18"
71
+ },
72
+ "scripts": {
73
+ "build": "tsc",
74
+ "test": "vitest run",
75
+ "test:watch": "vitest",
76
+ "typecheck": "tsc --noEmit"
77
+ }
78
+ }
@@ -0,0 +1,42 @@
1
+ # Deletion Checklist
2
+
3
+ ## Files and Code Ranges to Remove After Migration
4
+
5
+ The following files and code ranges should be deleted after the corresponding migration phase is complete and verified. Always run the full test suite before and after each deletion.
6
+
7
+ ---
8
+
9
+ | # | File Path | Line Range | Reason | Phase |
10
+ |---|-----------|:----------:|--------|:-----:|
11
+ {{#each migrationPlan.deletionChecklist}}
12
+ | {{@index}} | `{{filePath}}` | {{#if lineRange}}L{{lineRange.start}}–{{lineRange.end}}{{else}}Entire file{{/if}} | {{reason}} | — |
13
+ {{/each}}
14
+
15
+ ---
16
+
17
+ ## Estimated Impact
18
+
19
+ - **Total files affected**: {{filesToDelete.length}}
20
+ - **Estimated lines saved**: {{linesSavedEstimate}}
21
+
22
+ ## Deletion Procedure
23
+
24
+ For each item in the checklist:
25
+
26
+ - [ ] **1. Verify migration is complete** — Confirm the replacement library is fully integrated and tested
27
+ - [ ] **2. Run test suite** — Ensure all tests pass before deletion
28
+ - [ ] **3. Search for references** — Grep for imports/requires of the file to ensure no remaining consumers
29
+ - [ ] **4. Delete the file or code range** — Remove the specified lines or entire file
30
+ - [ ] **5. Run test suite again** — Confirm no regressions after deletion
31
+ - [ ] **6. Commit with descriptive message** — Reference the migration phase and recommendation number
32
+
33
+ ## Safety Notes
34
+
35
+ - **Never delete before migrating** — Each deletion is tied to a specific recommendation. Only delete after that recommendation's migration step is verified.
36
+ - **Adapter strategies first** — For high-risk items with adapter strategies, the adapter must be in place and tested before the legacy code is removed.
37
+ - **Incremental deletion** — Delete one file at a time and verify. Do not batch-delete across phases.
38
+ - **Keep backups** — Ensure the code is committed to version control before deletion so it can be recovered if needed.
39
+
40
+ ---
41
+
42
+ *Generated by [Next-Unicorn SKILL](../SKILL.md) — Analyze & Recommend Third-Party Optimizations*
@@ -0,0 +1,61 @@
1
+ # Migration Plan
2
+
3
+ ## Overview
4
+
5
+ This document outlines the phased migration plan for replacing hand-rolled implementations with recommended third-party libraries. Phases are ordered by risk level: low-risk quick wins first, followed by medium-risk refactoring, and finally high-risk changes requiring adapter strategies.
6
+
7
+ ---
8
+
9
+ {{#each migrationPlan.phases}}
10
+
11
+ ## Phase {{phase}}: {{name}}
12
+
13
+ {{#each steps}}
14
+
15
+ ### Step {{@index}}: {{description}}
16
+
17
+ - **Recommendation**: #{{recommendationIndex}}
18
+ {{#if adapterStrategy}}
19
+ - **Adapter Strategy Required**
20
+ - Wrapper Interface: `{{adapterStrategy.wrapperInterface}}`
21
+ - Legacy Code: `{{adapterStrategy.legacyCode}}`
22
+ - Target Library: `{{adapterStrategy.targetLibrary}}`
23
+ - Description: {{adapterStrategy.description}}
24
+ {{/if}}
25
+
26
+ {{/each}}
27
+
28
+ ---
29
+
30
+ {{/each}}
31
+
32
+ ## Pre-Migration Checklist
33
+
34
+ - [ ] Review all recommendations and verify they align with project goals
35
+ - [ ] Ensure CI/CD pipeline has adequate test coverage for affected modules
36
+ - [ ] Create feature branches for each phase
37
+ - [ ] Set up rollback procedures for each phase
38
+ - [ ] Communicate migration timeline to the team
39
+
40
+ ## Post-Migration Checklist
41
+
42
+ - [ ] Run full test suite after each phase
43
+ - [ ] Verify no regressions in affected functionality
44
+ - [ ] Update documentation to reflect new library usage
45
+ - [ ] Remove deprecated code per the deletion checklist
46
+ - [ ] Update dependency lock files
47
+ - [ ] Perform load testing if performance-critical paths were changed
48
+
49
+ ## Rollback Strategy
50
+
51
+ If a phase introduces regressions:
52
+
53
+ 1. Revert the feature branch merge
54
+ 2. If an adapter strategy was used, the adapter layer provides a clean rollback point
55
+ 3. Re-run the test suite to confirm rollback is clean
56
+ 4. Investigate the regression before re-attempting the phase
57
+
58
+ ---
59
+
60
+ *Generated by [Next-Unicorn SKILL](../SKILL.md) — Analyze & Recommend Third-Party Optimizations*
61
+
@@ -0,0 +1,123 @@
1
+ # Product Requirements Document: Third-Party Library Optimization
2
+
3
+ ## Executive Summary
4
+
5
+ This PRD presents a structured plan to replace hand-rolled implementations in **{{projectName}}** with battle-tested third-party libraries. The analysis identified **{{recommendedChanges.length}} recommendations** across **{{domains}}** domains, with an estimated **{{linesSavedEstimate}} lines of code** to be removed and a projected reduction in maintenance burden.
6
+
7
+ All recommendations have been verified against real, version-correct documentation via Context7 MCP.
8
+
9
+ ---
10
+
11
+ ## Problem Statement
12
+
13
+ The codebase contains custom implementations for functionality that is better served by mature, well-maintained open-source libraries. These hand-rolled solutions:
14
+
15
+ - Increase maintenance burden and onboarding time
16
+ - Lack features available in established libraries (e.g., edge cases, accessibility, i18n)
17
+ - May contain undiscovered bugs that battle-tested libraries have already resolved
18
+ - Prevent the team from benefiting from community-driven improvements and security patches
19
+
20
+ ## Proposed Solution
21
+
22
+ Replace identified hand-rolled implementations with verified third-party libraries through a phased migration plan that minimizes risk and allows incremental validation.
23
+
24
+ ## Scope
25
+
26
+ ### In Scope
27
+
28
+ - Library recommendations verified via Context7 MCP
29
+ - 7-dimension impact scoring for prioritization
30
+ - Phased migration plan with adapter strategies for high-risk changes
31
+ - Deletion checklist with estimated lines saved
32
+ - UX completeness audit (frontend projects)
33
+
34
+ ### Out of Scope
35
+
36
+ - Actual code migration (this PRD provides the plan; execution is separate)
37
+ - Vulnerability scanning of existing dependencies (use Snyk/Dependabot for that)
38
+ - Auto-updating existing library versions (use Renovate for that)
39
+
40
+ ---
41
+
42
+ ## Recommendations Summary
43
+
44
+ | # | Current Code | Recommended Library | Impact | Risk | Effort |
45
+ |---|-------------|--------------------:|:------:|:----:|:------:|
46
+ {{#each recommendedChanges}}
47
+ | {{@index}} | `{{currentImplementation.filePath}}` | **{{recommendedLibrary.name}}** v{{recommendedLibrary.version}} | {{impactScores.composite}}/10 | {{migrationRisk}} | {{estimatedEffort}}h |
48
+ {{/each}}
49
+
50
+ ## Impact Analysis
51
+
52
+ ### Quantitative Benefits
53
+
54
+ - **Lines of code removed**: {{linesSavedEstimate}}
55
+ - **Files deleted**: {{filesToDelete.length}}
56
+ - **Average composite impact score**: {{averageCompositeScore}}/10
57
+
58
+ ### Qualitative Benefits
59
+
60
+ - Reduced maintenance burden — community maintains the libraries
61
+ - Improved feature coverage — libraries provide functionality beyond what was hand-rolled
62
+ - Better security posture — libraries receive regular security audits and patches
63
+ - Faster onboarding — new developers are more likely to know popular libraries
64
+ - Improved test coverage — libraries come with their own test suites
65
+
66
+ ## Migration Plan Overview
67
+
68
+ {{#each migrationPlan.phases}}
69
+
70
+ ### Phase {{phase}}: {{name}}
71
+
72
+ - **Steps**: {{steps.length}}
73
+ - **Risk level**: {{riskLevel}}
74
+ - **Estimated total effort**: {{totalEffort}} developer-hours
75
+
76
+ {{/each}}
77
+
78
+ ## UX Audit Summary
79
+
80
+ | Category | Status | Recommended Library |
81
+ |----------|:------:|--------------------:|
82
+ {{#each uxAudit}}
83
+ | {{category}} | {{status}} | {{#if recommendedLibrary}}{{recommendedLibrary}}{{else}}—{{/if}} |
84
+ {{/each}}
85
+
86
+ ## Success Criteria
87
+
88
+ - [ ] All migration phases completed without regressions
89
+ - [ ] Test suite passes at 100% after each phase
90
+ - [ ] Deleted code does not leave orphaned imports or dead references
91
+ - [ ] Performance benchmarks show no degradation (or improvement)
92
+ - [ ] Team has documented the new library usage patterns
93
+
94
+ ## Risks and Mitigations
95
+
96
+ | Risk | Likelihood | Impact | Mitigation |
97
+ |------|:----------:|:------:|------------|
98
+ | Library introduces breaking changes | Medium | High | Pin versions, use lock files, monitor changelogs |
99
+ | Migration causes regressions | Medium | High | Phased rollout with adapter strategies, comprehensive test coverage |
100
+ | Team unfamiliar with new library | Low | Medium | Provide documentation links, pair programming sessions |
101
+ | License incompatibility discovered late | Low | High | Pre-filtered by license allowlist in analysis |
102
+ | Context7 verification was unavailable | Low | Medium | Re-run verification before starting migration |
103
+
104
+ ## Timeline
105
+
106
+ | Phase | Duration | Dependencies |
107
+ |-------|:--------:|:------------:|
108
+ {{#each migrationPlan.phases}}
109
+ | Phase {{phase}}: {{name}} | {{estimatedDuration}} | {{dependencies}} |
110
+ {{/each}}
111
+
112
+ ## Stakeholder Sign-Off
113
+
114
+ | Role | Name | Approval | Date |
115
+ |------|------|:--------:|:----:|
116
+ | Engineering Lead | | ☐ | |
117
+ | Product Manager | | ☐ | |
118
+ | Security Lead | | ☐ | |
119
+ | QA Lead | | ☐ | |
120
+
121
+ ---
122
+
123
+ *Generated by [Next-Unicorn SKILL](../SKILL.md) — Analyze & Recommend Third-Party Optimizations*
@@ -0,0 +1,28 @@
1
+ # Summary Comparison Table
2
+
3
+ ## Recommended Third-Party Library Replacements
4
+
5
+ | # | Current Implementation | Recommended Library | Domain | Composite Score | Migration Risk | Effort (hrs) | Verification |
6
+ |---|----------------------|--------------------:|--------|:--------------:|:--------------:|:------------:|:------------:|
7
+ {{#each recommendedChanges}}
8
+ | {{@index}} | `{{currentImplementation.filePath}}` (L{{currentImplementation.lineRange.start}}–{{currentImplementation.lineRange.end}}) — {{currentImplementation.patternCategory}} | **{{recommendedLibrary.name}}** v{{recommendedLibrary.version}} ({{recommendedLibrary.license}}) | {{domain}} | {{impactScores.composite}} | {{migrationRisk}} | {{estimatedEffort}} | {{verificationStatus}} |
9
+ {{/each}}
10
+
11
+ ## Impact Score Breakdown
12
+
13
+ | # | Library | Scalability | Performance | Security | Maintainability | Feature Richness | UX | UI Aesthetics |
14
+ |---|---------|:-----------:|:-----------:|:--------:|:--------------:|:----------------:|:--:|:-------------:|
15
+ {{#each recommendedChanges}}
16
+ | {{@index}} | {{recommendedLibrary.name}} | {{impactScores.scalability}} | {{impactScores.performance}} | {{impactScores.security}} | {{impactScores.maintainability}} | {{impactScores.feature_richness}} | {{impactScores.ux}} | {{impactScores.ui_aesthetics}} |
17
+ {{/each}}
18
+
19
+ ## Summary Statistics
20
+
21
+ - **Total recommendations**: {{recommendedChanges.length}}
22
+ - **Estimated lines saved**: {{linesSavedEstimate}}
23
+ - **Files to delete**: {{filesToDelete.length}}
24
+ - **Verified recommendations**: {{count verificationStatus "verified"}} / {{recommendedChanges.length}}
25
+
26
+ ---
27
+
28
+ *Generated by [Next-Unicorn SKILL](../SKILL.md) — Analyze & Recommend Third-Party Optimizations*
@@ -0,0 +1,61 @@
1
+ # Dependency Update Plan Template
2
+
3
+ ## Summary
4
+
5
+ | Metric | Count |
6
+ |--------|-------|
7
+ | Total updates available | {{totalUpdatesAvailable}} |
8
+ | Critical (security) | {{critical}} |
9
+ | Urgent (deprecated/security) | {{urgent}} |
10
+ | Recommended (new features) | {{recommended}} |
11
+ | Routine (patches) | {{routine}} |
12
+ | Estimated total effort | {{estimatedTotalEffort}}h |
13
+
14
+ ## Critical Updates (Action Required)
15
+
16
+ {{#each criticalUpdates}}
17
+ ### {{packageName}}: {{currentVersion}} -> {{targetVersion}}
18
+
19
+ - **Update type:** {{updateType}}
20
+ - **Urgency:** {{urgency}}
21
+ - **Breaking risk:** {{breakingRisk}}
22
+ - **Vulnerabilities fixed:** {{vulnFixCount}}
23
+ - **Estimated effort:** {{estimatedEffort}}h
24
+
25
+ | Dimension | Score |
26
+ |-----------|-------|
27
+ | Security | {{impactScores.security}}/10 |
28
+ | Composite | {{impactScores.composite}}/10 |
29
+
30
+ {{/each}}
31
+
32
+ ## Grouped Updates
33
+
34
+ {{#each groups}}
35
+ ### {{groupKey}} ({{items.length}} packages)
36
+
37
+ **Group urgency:** {{urgency}}
38
+
39
+ | Package | Current | Target | Type | Risk |
40
+ |---------|---------|--------|------|------|
41
+ {{#each items}}
42
+ | {{packageName}} | {{currentVersion}} | {{targetVersion}} | {{updateType}} | {{breakingRisk}} |
43
+ {{/each}}
44
+
45
+ {{/each}}
46
+
47
+ ## Routine Updates
48
+
49
+ {{#each routineUpdates}}
50
+ - **{{packageName}}:** {{currentVersion}} -> {{targetVersion}} ({{updateType}}, {{estimatedEffort}}h)
51
+ {{/each}}
52
+
53
+ ## Update Policy
54
+
55
+ - **Strategy:** {{policy.defaultStrategy}}
56
+ - **Min age:** {{policy.minAgeDays}} days
57
+ - **Pinned packages:** {{#if policy.pinned}}{{policy.pinned}}{{else}}None{{/if}}
58
+
59
+ ---
60
+
61
+ *Generated by Next-Unicorn SKILL v2.0.0*
@@ -0,0 +1,50 @@
1
+ # Vulnerability Report Template
2
+
3
+ ## Summary
4
+
5
+ | Metric | Count |
6
+ |--------|-------|
7
+ | Total dependencies scanned | {{totalDepsScanned}} |
8
+ | Current deps scanned | {{currentDepsScanned}} |
9
+ | Recommended deps scanned | {{recommendedDepsScanned}} |
10
+ | Critical | {{critical}} |
11
+ | High | {{high}} |
12
+ | Medium | {{medium}} |
13
+ | Low | {{low}} |
14
+ | Fixable | {{fixable}} |
15
+ | Unfixable | {{unfixable}} |
16
+
17
+ ## Critical Findings
18
+
19
+ {{#each criticalFindings}}
20
+ ### {{vulnerabilityId}}
21
+
22
+ - **Package:** {{packageName}}@{{installedVersion}}
23
+ - **Source:** {{source}}
24
+ - **CVSS Score:** {{cvssScore}}
25
+ - **Summary:** {{summary}}
26
+ - **Fix Available:** {{#if fixAvailable}}Upgrade to {{fixAvailable}}{{else}}No fix available{{/if}}
27
+
28
+ {{/each}}
29
+
30
+ ## High Findings
31
+
32
+ {{#each highFindings}}
33
+ ### {{vulnerabilityId}}
34
+
35
+ - **Package:** {{packageName}}@{{installedVersion}}
36
+ - **Source:** {{source}}
37
+ - **Summary:** {{summary}}
38
+ - **Fix Available:** {{#if fixAvailable}}Upgrade to {{fixAvailable}}{{else}}No fix available{{/if}}
39
+
40
+ {{/each}}
41
+
42
+ ## Recommended Actions
43
+
44
+ 1. **Immediate:** Patch all critical and high vulnerabilities with available fixes
45
+ 2. **Short-term:** Evaluate alternatives for unfixable vulnerabilities
46
+ 3. **Long-term:** Set up automated vulnerability scanning in CI/CD pipeline
47
+
48
+ ---
49
+
50
+ *Generated by Next-Unicorn SKILL v2.0.0*