@nebutra/next-unicorn-skill 2.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +57 -0
- package/LICENSE +21 -0
- package/README.md +316 -0
- package/SKILL.md +318 -0
- package/dist/analyzer/pattern-catalog.d.ts +35 -0
- package/dist/analyzer/pattern-catalog.d.ts.map +1 -0
- package/dist/analyzer/pattern-catalog.js +342 -0
- package/dist/analyzer/pattern-catalog.js.map +1 -0
- package/dist/analyzer/scanner.d.ts +33 -0
- package/dist/analyzer/scanner.d.ts.map +1 -0
- package/dist/analyzer/scanner.js +302 -0
- package/dist/analyzer/scanner.js.map +1 -0
- package/dist/auditor/ux-auditor.d.ts +26 -0
- package/dist/auditor/ux-auditor.d.ts.map +1 -0
- package/dist/auditor/ux-auditor.js +272 -0
- package/dist/auditor/ux-auditor.js.map +1 -0
- package/dist/checker/peer-dependency-checker.d.ts +62 -0
- package/dist/checker/peer-dependency-checker.d.ts.map +1 -0
- package/dist/checker/peer-dependency-checker.js +94 -0
- package/dist/checker/peer-dependency-checker.js.map +1 -0
- package/dist/index.d.ts +78 -0
- package/dist/index.d.ts.map +1 -0
- package/dist/index.js +325 -0
- package/dist/index.js.map +1 -0
- package/dist/planner/migration-planner.d.ts +47 -0
- package/dist/planner/migration-planner.d.ts.map +1 -0
- package/dist/planner/migration-planner.js +144 -0
- package/dist/planner/migration-planner.js.map +1 -0
- package/dist/pr-creator/git-operations.d.ts +29 -0
- package/dist/pr-creator/git-operations.d.ts.map +1 -0
- package/dist/pr-creator/git-operations.js +10 -0
- package/dist/pr-creator/git-operations.js.map +1 -0
- package/dist/pr-creator/platform-client.d.ts +47 -0
- package/dist/pr-creator/platform-client.d.ts.map +1 -0
- package/dist/pr-creator/platform-client.js +9 -0
- package/dist/pr-creator/platform-client.js.map +1 -0
- package/dist/pr-creator/pr-description-builder.d.ts +23 -0
- package/dist/pr-creator/pr-description-builder.d.ts.map +1 -0
- package/dist/pr-creator/pr-description-builder.js +187 -0
- package/dist/pr-creator/pr-description-builder.js.map +1 -0
- package/dist/pr-creator/pr-executor.d.ts +30 -0
- package/dist/pr-creator/pr-executor.d.ts.map +1 -0
- package/dist/pr-creator/pr-executor.js +109 -0
- package/dist/pr-creator/pr-executor.js.map +1 -0
- package/dist/pr-creator/pr-strategy.d.ts +56 -0
- package/dist/pr-creator/pr-strategy.d.ts.map +1 -0
- package/dist/pr-creator/pr-strategy.js +125 -0
- package/dist/pr-creator/pr-strategy.js.map +1 -0
- package/dist/schemas/input.schema.d.ts +231 -0
- package/dist/schemas/input.schema.d.ts.map +1 -0
- package/dist/schemas/input.schema.js +159 -0
- package/dist/schemas/input.schema.js.map +1 -0
- package/dist/schemas/output.schema.d.ts +2543 -0
- package/dist/schemas/output.schema.d.ts.map +1 -0
- package/dist/schemas/output.schema.js +199 -0
- package/dist/schemas/output.schema.js.map +1 -0
- package/dist/scorer/impact-scorer.d.ts +45 -0
- package/dist/scorer/impact-scorer.d.ts.map +1 -0
- package/dist/scorer/impact-scorer.js +243 -0
- package/dist/scorer/impact-scorer.js.map +1 -0
- package/dist/security/osv-client.d.ts +72 -0
- package/dist/security/osv-client.d.ts.map +1 -0
- package/dist/security/osv-client.js +36 -0
- package/dist/security/osv-client.js.map +1 -0
- package/dist/security/vuln-report-builder.d.ts +18 -0
- package/dist/security/vuln-report-builder.d.ts.map +1 -0
- package/dist/security/vuln-report-builder.js +141 -0
- package/dist/security/vuln-report-builder.js.map +1 -0
- package/dist/security/vulnerability-scanner.d.ts +65 -0
- package/dist/security/vulnerability-scanner.d.ts.map +1 -0
- package/dist/security/vulnerability-scanner.js +140 -0
- package/dist/security/vulnerability-scanner.js.map +1 -0
- package/dist/updater/changelog-verifier.d.ts +29 -0
- package/dist/updater/changelog-verifier.d.ts.map +1 -0
- package/dist/updater/changelog-verifier.js +80 -0
- package/dist/updater/changelog-verifier.js.map +1 -0
- package/dist/updater/registry-client.d.ts +49 -0
- package/dist/updater/registry-client.d.ts.map +1 -0
- package/dist/updater/registry-client.js +10 -0
- package/dist/updater/registry-client.js.map +1 -0
- package/dist/updater/update-plan-builder.d.ts +23 -0
- package/dist/updater/update-plan-builder.d.ts.map +1 -0
- package/dist/updater/update-plan-builder.js +93 -0
- package/dist/updater/update-plan-builder.js.map +1 -0
- package/dist/updater/update-policy.d.ts +50 -0
- package/dist/updater/update-policy.d.ts.map +1 -0
- package/dist/updater/update-policy.js +118 -0
- package/dist/updater/update-policy.js.map +1 -0
- package/dist/updater/update-scorer.d.ts +51 -0
- package/dist/updater/update-scorer.d.ts.map +1 -0
- package/dist/updater/update-scorer.js +166 -0
- package/dist/updater/update-scorer.js.map +1 -0
- package/dist/utils/constraint-filter.d.ts +44 -0
- package/dist/utils/constraint-filter.d.ts.map +1 -0
- package/dist/utils/constraint-filter.js +69 -0
- package/dist/utils/constraint-filter.js.map +1 -0
- package/dist/utils/serializer.d.ts +17 -0
- package/dist/utils/serializer.d.ts.map +1 -0
- package/dist/utils/serializer.js +24 -0
- package/dist/utils/serializer.js.map +1 -0
- package/dist/utils/skill-parser.d.ts +29 -0
- package/dist/utils/skill-parser.d.ts.map +1 -0
- package/dist/utils/skill-parser.js +175 -0
- package/dist/utils/skill-parser.js.map +1 -0
- package/dist/verifier/context7.d.ts +48 -0
- package/dist/verifier/context7.d.ts.map +1 -0
- package/dist/verifier/context7.js +97 -0
- package/dist/verifier/context7.js.map +1 -0
- package/examples/backend-node/input.json +28 -0
- package/examples/backend-node/output.json +343 -0
- package/examples/frontend-nextjs/input.json +37 -0
- package/examples/frontend-nextjs/output.json +302 -0
- package/package.json +78 -0
- package/templates/deletion-checklist.md +42 -0
- package/templates/migration-plan.md +61 -0
- package/templates/prd-template.md +123 -0
- package/templates/summary-table.md +28 -0
- package/templates/update-plan.md +61 -0
- package/templates/vuln-report.md +50 -0
package/package.json
ADDED
|
@@ -0,0 +1,78 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "@nebutra/next-unicorn-skill",
|
|
3
|
+
"version": "2.0.0",
|
|
4
|
+
"description": "Stop Vibe Coding debt: audit your codebase, replace reinvented wheels with unicorn-grade libraries, scan vulnerabilities, auto-update deps, and auto-create PRs — all verified via Context7 MCP.",
|
|
5
|
+
"type": "module",
|
|
6
|
+
"main": "dist/index.js",
|
|
7
|
+
"types": "dist/index.d.ts",
|
|
8
|
+
"exports": {
|
|
9
|
+
".": {
|
|
10
|
+
"import": "./dist/index.js",
|
|
11
|
+
"types": "./dist/index.d.ts"
|
|
12
|
+
}
|
|
13
|
+
},
|
|
14
|
+
"files": [
|
|
15
|
+
"dist",
|
|
16
|
+
"SKILL.md",
|
|
17
|
+
"templates",
|
|
18
|
+
"examples",
|
|
19
|
+
"LICENSE",
|
|
20
|
+
"CHANGELOG.md"
|
|
21
|
+
],
|
|
22
|
+
"keywords": [
|
|
23
|
+
"skill",
|
|
24
|
+
"mcp",
|
|
25
|
+
"ai-agent",
|
|
26
|
+
"claude-code",
|
|
27
|
+
"codebase-analysis",
|
|
28
|
+
"third-party-libraries",
|
|
29
|
+
"library-recommendations",
|
|
30
|
+
"dependency-optimization",
|
|
31
|
+
"migration-planning",
|
|
32
|
+
"hand-rolled-code",
|
|
33
|
+
"code-modernization",
|
|
34
|
+
"context7",
|
|
35
|
+
"impact-scoring",
|
|
36
|
+
"ux-audit",
|
|
37
|
+
"vulnerability-scanning",
|
|
38
|
+
"auto-update",
|
|
39
|
+
"pr-automation",
|
|
40
|
+
"technical-debt",
|
|
41
|
+
"vibe-coding",
|
|
42
|
+
"monorepo"
|
|
43
|
+
],
|
|
44
|
+
"author": "TsekaLuk (https://github.com/TsekaLuk)",
|
|
45
|
+
"license": "MIT",
|
|
46
|
+
"repository": {
|
|
47
|
+
"type": "git",
|
|
48
|
+
"url": "https://github.com/TsekaLuk/Next-Unicorn-Skill.git"
|
|
49
|
+
},
|
|
50
|
+
"homepage": "https://github.com/TsekaLuk/Next-Unicorn-Skill#readme",
|
|
51
|
+
"bugs": {
|
|
52
|
+
"url": "https://github.com/TsekaLuk/Next-Unicorn-Skill/issues"
|
|
53
|
+
},
|
|
54
|
+
"engines": {
|
|
55
|
+
"node": ">=18"
|
|
56
|
+
},
|
|
57
|
+
"publishConfig": {
|
|
58
|
+
"access": "public",
|
|
59
|
+
"registry": "https://registry.npmjs.org"
|
|
60
|
+
},
|
|
61
|
+
"dependencies": {
|
|
62
|
+
"semver": "^7.7.4",
|
|
63
|
+
"zod": "^3.23.0"
|
|
64
|
+
},
|
|
65
|
+
"devDependencies": {
|
|
66
|
+
"@types/node": "^22.15.0",
|
|
67
|
+
"@types/semver": "^7.7.1",
|
|
68
|
+
"fast-check": "^4.4.0",
|
|
69
|
+
"typescript": "^5.7.0",
|
|
70
|
+
"vitest": "^4.0.18"
|
|
71
|
+
},
|
|
72
|
+
"scripts": {
|
|
73
|
+
"build": "tsc",
|
|
74
|
+
"test": "vitest run",
|
|
75
|
+
"test:watch": "vitest",
|
|
76
|
+
"typecheck": "tsc --noEmit"
|
|
77
|
+
}
|
|
78
|
+
}
|
|
@@ -0,0 +1,42 @@
|
|
|
1
|
+
# Deletion Checklist
|
|
2
|
+
|
|
3
|
+
## Files and Code Ranges to Remove After Migration
|
|
4
|
+
|
|
5
|
+
The following files and code ranges should be deleted after the corresponding migration phase is complete and verified. Always run the full test suite before and after each deletion.
|
|
6
|
+
|
|
7
|
+
---
|
|
8
|
+
|
|
9
|
+
| # | File Path | Line Range | Reason | Phase |
|
|
10
|
+
|---|-----------|:----------:|--------|:-----:|
|
|
11
|
+
{{#each migrationPlan.deletionChecklist}}
|
|
12
|
+
| {{@index}} | `{{filePath}}` | {{#if lineRange}}L{{lineRange.start}}–{{lineRange.end}}{{else}}Entire file{{/if}} | {{reason}} | — |
|
|
13
|
+
{{/each}}
|
|
14
|
+
|
|
15
|
+
---
|
|
16
|
+
|
|
17
|
+
## Estimated Impact
|
|
18
|
+
|
|
19
|
+
- **Total files affected**: {{filesToDelete.length}}
|
|
20
|
+
- **Estimated lines saved**: {{linesSavedEstimate}}
|
|
21
|
+
|
|
22
|
+
## Deletion Procedure
|
|
23
|
+
|
|
24
|
+
For each item in the checklist:
|
|
25
|
+
|
|
26
|
+
- [ ] **1. Verify migration is complete** — Confirm the replacement library is fully integrated and tested
|
|
27
|
+
- [ ] **2. Run test suite** — Ensure all tests pass before deletion
|
|
28
|
+
- [ ] **3. Search for references** — Grep for imports/requires of the file to ensure no remaining consumers
|
|
29
|
+
- [ ] **4. Delete the file or code range** — Remove the specified lines or entire file
|
|
30
|
+
- [ ] **5. Run test suite again** — Confirm no regressions after deletion
|
|
31
|
+
- [ ] **6. Commit with descriptive message** — Reference the migration phase and recommendation number
|
|
32
|
+
|
|
33
|
+
## Safety Notes
|
|
34
|
+
|
|
35
|
+
- **Never delete before migrating** — Each deletion is tied to a specific recommendation. Only delete after that recommendation's migration step is verified.
|
|
36
|
+
- **Adapter strategies first** — For high-risk items with adapter strategies, the adapter must be in place and tested before the legacy code is removed.
|
|
37
|
+
- **Incremental deletion** — Delete one file at a time and verify. Do not batch-delete across phases.
|
|
38
|
+
- **Keep backups** — Ensure the code is committed to version control before deletion so it can be recovered if needed.
|
|
39
|
+
|
|
40
|
+
---
|
|
41
|
+
|
|
42
|
+
*Generated by [Next-Unicorn SKILL](../SKILL.md) — Analyze & Recommend Third-Party Optimizations*
|
|
@@ -0,0 +1,61 @@
|
|
|
1
|
+
# Migration Plan
|
|
2
|
+
|
|
3
|
+
## Overview
|
|
4
|
+
|
|
5
|
+
This document outlines the phased migration plan for replacing hand-rolled implementations with recommended third-party libraries. Phases are ordered by risk level: low-risk quick wins first, followed by medium-risk refactoring, and finally high-risk changes requiring adapter strategies.
|
|
6
|
+
|
|
7
|
+
---
|
|
8
|
+
|
|
9
|
+
{{#each migrationPlan.phases}}
|
|
10
|
+
|
|
11
|
+
## Phase {{phase}}: {{name}}
|
|
12
|
+
|
|
13
|
+
{{#each steps}}
|
|
14
|
+
|
|
15
|
+
### Step {{@index}}: {{description}}
|
|
16
|
+
|
|
17
|
+
- **Recommendation**: #{{recommendationIndex}}
|
|
18
|
+
{{#if adapterStrategy}}
|
|
19
|
+
- **Adapter Strategy Required**
|
|
20
|
+
- Wrapper Interface: `{{adapterStrategy.wrapperInterface}}`
|
|
21
|
+
- Legacy Code: `{{adapterStrategy.legacyCode}}`
|
|
22
|
+
- Target Library: `{{adapterStrategy.targetLibrary}}`
|
|
23
|
+
- Description: {{adapterStrategy.description}}
|
|
24
|
+
{{/if}}
|
|
25
|
+
|
|
26
|
+
{{/each}}
|
|
27
|
+
|
|
28
|
+
---
|
|
29
|
+
|
|
30
|
+
{{/each}}
|
|
31
|
+
|
|
32
|
+
## Pre-Migration Checklist
|
|
33
|
+
|
|
34
|
+
- [ ] Review all recommendations and verify they align with project goals
|
|
35
|
+
- [ ] Ensure CI/CD pipeline has adequate test coverage for affected modules
|
|
36
|
+
- [ ] Create feature branches for each phase
|
|
37
|
+
- [ ] Set up rollback procedures for each phase
|
|
38
|
+
- [ ] Communicate migration timeline to the team
|
|
39
|
+
|
|
40
|
+
## Post-Migration Checklist
|
|
41
|
+
|
|
42
|
+
- [ ] Run full test suite after each phase
|
|
43
|
+
- [ ] Verify no regressions in affected functionality
|
|
44
|
+
- [ ] Update documentation to reflect new library usage
|
|
45
|
+
- [ ] Remove deprecated code per the deletion checklist
|
|
46
|
+
- [ ] Update dependency lock files
|
|
47
|
+
- [ ] Perform load testing if performance-critical paths were changed
|
|
48
|
+
|
|
49
|
+
## Rollback Strategy
|
|
50
|
+
|
|
51
|
+
If a phase introduces regressions:
|
|
52
|
+
|
|
53
|
+
1. Revert the feature branch merge
|
|
54
|
+
2. If an adapter strategy was used, the adapter layer provides a clean rollback point
|
|
55
|
+
3. Re-run the test suite to confirm rollback is clean
|
|
56
|
+
4. Investigate the regression before re-attempting the phase
|
|
57
|
+
|
|
58
|
+
---
|
|
59
|
+
|
|
60
|
+
*Generated by [Next-Unicorn SKILL](../SKILL.md) — Analyze & Recommend Third-Party Optimizations*
|
|
61
|
+
|
|
@@ -0,0 +1,123 @@
|
|
|
1
|
+
# Product Requirements Document: Third-Party Library Optimization
|
|
2
|
+
|
|
3
|
+
## Executive Summary
|
|
4
|
+
|
|
5
|
+
This PRD presents a structured plan to replace hand-rolled implementations in **{{projectName}}** with battle-tested third-party libraries. The analysis identified **{{recommendedChanges.length}} recommendations** across **{{domains}}** domains, with an estimated **{{linesSavedEstimate}} lines of code** to be removed and a projected reduction in maintenance burden.
|
|
6
|
+
|
|
7
|
+
All recommendations have been verified against real, version-correct documentation via Context7 MCP.
|
|
8
|
+
|
|
9
|
+
---
|
|
10
|
+
|
|
11
|
+
## Problem Statement
|
|
12
|
+
|
|
13
|
+
The codebase contains custom implementations for functionality that is better served by mature, well-maintained open-source libraries. These hand-rolled solutions:
|
|
14
|
+
|
|
15
|
+
- Increase maintenance burden and onboarding time
|
|
16
|
+
- Lack features available in established libraries (e.g., edge cases, accessibility, i18n)
|
|
17
|
+
- May contain undiscovered bugs that battle-tested libraries have already resolved
|
|
18
|
+
- Prevent the team from benefiting from community-driven improvements and security patches
|
|
19
|
+
|
|
20
|
+
## Proposed Solution
|
|
21
|
+
|
|
22
|
+
Replace identified hand-rolled implementations with verified third-party libraries through a phased migration plan that minimizes risk and allows incremental validation.
|
|
23
|
+
|
|
24
|
+
## Scope
|
|
25
|
+
|
|
26
|
+
### In Scope
|
|
27
|
+
|
|
28
|
+
- Library recommendations verified via Context7 MCP
|
|
29
|
+
- 7-dimension impact scoring for prioritization
|
|
30
|
+
- Phased migration plan with adapter strategies for high-risk changes
|
|
31
|
+
- Deletion checklist with estimated lines saved
|
|
32
|
+
- UX completeness audit (frontend projects)
|
|
33
|
+
|
|
34
|
+
### Out of Scope
|
|
35
|
+
|
|
36
|
+
- Actual code migration (this PRD provides the plan; execution is separate)
|
|
37
|
+
- Vulnerability scanning of existing dependencies (use Snyk/Dependabot for that)
|
|
38
|
+
- Auto-updating existing library versions (use Renovate for that)
|
|
39
|
+
|
|
40
|
+
---
|
|
41
|
+
|
|
42
|
+
## Recommendations Summary
|
|
43
|
+
|
|
44
|
+
| # | Current Code | Recommended Library | Impact | Risk | Effort |
|
|
45
|
+
|---|-------------|--------------------:|:------:|:----:|:------:|
|
|
46
|
+
{{#each recommendedChanges}}
|
|
47
|
+
| {{@index}} | `{{currentImplementation.filePath}}` | **{{recommendedLibrary.name}}** v{{recommendedLibrary.version}} | {{impactScores.composite}}/10 | {{migrationRisk}} | {{estimatedEffort}}h |
|
|
48
|
+
{{/each}}
|
|
49
|
+
|
|
50
|
+
## Impact Analysis
|
|
51
|
+
|
|
52
|
+
### Quantitative Benefits
|
|
53
|
+
|
|
54
|
+
- **Lines of code removed**: {{linesSavedEstimate}}
|
|
55
|
+
- **Files deleted**: {{filesToDelete.length}}
|
|
56
|
+
- **Average composite impact score**: {{averageCompositeScore}}/10
|
|
57
|
+
|
|
58
|
+
### Qualitative Benefits
|
|
59
|
+
|
|
60
|
+
- Reduced maintenance burden — community maintains the libraries
|
|
61
|
+
- Improved feature coverage — libraries provide functionality beyond what was hand-rolled
|
|
62
|
+
- Better security posture — libraries receive regular security audits and patches
|
|
63
|
+
- Faster onboarding — new developers are more likely to know popular libraries
|
|
64
|
+
- Improved test coverage — libraries come with their own test suites
|
|
65
|
+
|
|
66
|
+
## Migration Plan Overview
|
|
67
|
+
|
|
68
|
+
{{#each migrationPlan.phases}}
|
|
69
|
+
|
|
70
|
+
### Phase {{phase}}: {{name}}
|
|
71
|
+
|
|
72
|
+
- **Steps**: {{steps.length}}
|
|
73
|
+
- **Risk level**: {{riskLevel}}
|
|
74
|
+
- **Estimated total effort**: {{totalEffort}} developer-hours
|
|
75
|
+
|
|
76
|
+
{{/each}}
|
|
77
|
+
|
|
78
|
+
## UX Audit Summary
|
|
79
|
+
|
|
80
|
+
| Category | Status | Recommended Library |
|
|
81
|
+
|----------|:------:|--------------------:|
|
|
82
|
+
{{#each uxAudit}}
|
|
83
|
+
| {{category}} | {{status}} | {{#if recommendedLibrary}}{{recommendedLibrary}}{{else}}—{{/if}} |
|
|
84
|
+
{{/each}}
|
|
85
|
+
|
|
86
|
+
## Success Criteria
|
|
87
|
+
|
|
88
|
+
- [ ] All migration phases completed without regressions
|
|
89
|
+
- [ ] Test suite passes at 100% after each phase
|
|
90
|
+
- [ ] Deleted code does not leave orphaned imports or dead references
|
|
91
|
+
- [ ] Performance benchmarks show no degradation (or improvement)
|
|
92
|
+
- [ ] Team has documented the new library usage patterns
|
|
93
|
+
|
|
94
|
+
## Risks and Mitigations
|
|
95
|
+
|
|
96
|
+
| Risk | Likelihood | Impact | Mitigation |
|
|
97
|
+
|------|:----------:|:------:|------------|
|
|
98
|
+
| Library introduces breaking changes | Medium | High | Pin versions, use lock files, monitor changelogs |
|
|
99
|
+
| Migration causes regressions | Medium | High | Phased rollout with adapter strategies, comprehensive test coverage |
|
|
100
|
+
| Team unfamiliar with new library | Low | Medium | Provide documentation links, pair programming sessions |
|
|
101
|
+
| License incompatibility discovered late | Low | High | Pre-filtered by license allowlist in analysis |
|
|
102
|
+
| Context7 verification was unavailable | Low | Medium | Re-run verification before starting migration |
|
|
103
|
+
|
|
104
|
+
## Timeline
|
|
105
|
+
|
|
106
|
+
| Phase | Duration | Dependencies |
|
|
107
|
+
|-------|:--------:|:------------:|
|
|
108
|
+
{{#each migrationPlan.phases}}
|
|
109
|
+
| Phase {{phase}}: {{name}} | {{estimatedDuration}} | {{dependencies}} |
|
|
110
|
+
{{/each}}
|
|
111
|
+
|
|
112
|
+
## Stakeholder Sign-Off
|
|
113
|
+
|
|
114
|
+
| Role | Name | Approval | Date |
|
|
115
|
+
|------|------|:--------:|:----:|
|
|
116
|
+
| Engineering Lead | | ☐ | |
|
|
117
|
+
| Product Manager | | ☐ | |
|
|
118
|
+
| Security Lead | | ☐ | |
|
|
119
|
+
| QA Lead | | ☐ | |
|
|
120
|
+
|
|
121
|
+
---
|
|
122
|
+
|
|
123
|
+
*Generated by [Next-Unicorn SKILL](../SKILL.md) — Analyze & Recommend Third-Party Optimizations*
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
# Summary Comparison Table
|
|
2
|
+
|
|
3
|
+
## Recommended Third-Party Library Replacements
|
|
4
|
+
|
|
5
|
+
| # | Current Implementation | Recommended Library | Domain | Composite Score | Migration Risk | Effort (hrs) | Verification |
|
|
6
|
+
|---|----------------------|--------------------:|--------|:--------------:|:--------------:|:------------:|:------------:|
|
|
7
|
+
{{#each recommendedChanges}}
|
|
8
|
+
| {{@index}} | `{{currentImplementation.filePath}}` (L{{currentImplementation.lineRange.start}}–{{currentImplementation.lineRange.end}}) — {{currentImplementation.patternCategory}} | **{{recommendedLibrary.name}}** v{{recommendedLibrary.version}} ({{recommendedLibrary.license}}) | {{domain}} | {{impactScores.composite}} | {{migrationRisk}} | {{estimatedEffort}} | {{verificationStatus}} |
|
|
9
|
+
{{/each}}
|
|
10
|
+
|
|
11
|
+
## Impact Score Breakdown
|
|
12
|
+
|
|
13
|
+
| # | Library | Scalability | Performance | Security | Maintainability | Feature Richness | UX | UI Aesthetics |
|
|
14
|
+
|---|---------|:-----------:|:-----------:|:--------:|:--------------:|:----------------:|:--:|:-------------:|
|
|
15
|
+
{{#each recommendedChanges}}
|
|
16
|
+
| {{@index}} | {{recommendedLibrary.name}} | {{impactScores.scalability}} | {{impactScores.performance}} | {{impactScores.security}} | {{impactScores.maintainability}} | {{impactScores.feature_richness}} | {{impactScores.ux}} | {{impactScores.ui_aesthetics}} |
|
|
17
|
+
{{/each}}
|
|
18
|
+
|
|
19
|
+
## Summary Statistics
|
|
20
|
+
|
|
21
|
+
- **Total recommendations**: {{recommendedChanges.length}}
|
|
22
|
+
- **Estimated lines saved**: {{linesSavedEstimate}}
|
|
23
|
+
- **Files to delete**: {{filesToDelete.length}}
|
|
24
|
+
- **Verified recommendations**: {{count verificationStatus "verified"}} / {{recommendedChanges.length}}
|
|
25
|
+
|
|
26
|
+
---
|
|
27
|
+
|
|
28
|
+
*Generated by [Next-Unicorn SKILL](../SKILL.md) — Analyze & Recommend Third-Party Optimizations*
|
|
@@ -0,0 +1,61 @@
|
|
|
1
|
+
# Dependency Update Plan Template
|
|
2
|
+
|
|
3
|
+
## Summary
|
|
4
|
+
|
|
5
|
+
| Metric | Count |
|
|
6
|
+
|--------|-------|
|
|
7
|
+
| Total updates available | {{totalUpdatesAvailable}} |
|
|
8
|
+
| Critical (security) | {{critical}} |
|
|
9
|
+
| Urgent (deprecated/security) | {{urgent}} |
|
|
10
|
+
| Recommended (new features) | {{recommended}} |
|
|
11
|
+
| Routine (patches) | {{routine}} |
|
|
12
|
+
| Estimated total effort | {{estimatedTotalEffort}}h |
|
|
13
|
+
|
|
14
|
+
## Critical Updates (Action Required)
|
|
15
|
+
|
|
16
|
+
{{#each criticalUpdates}}
|
|
17
|
+
### {{packageName}}: {{currentVersion}} -> {{targetVersion}}
|
|
18
|
+
|
|
19
|
+
- **Update type:** {{updateType}}
|
|
20
|
+
- **Urgency:** {{urgency}}
|
|
21
|
+
- **Breaking risk:** {{breakingRisk}}
|
|
22
|
+
- **Vulnerabilities fixed:** {{vulnFixCount}}
|
|
23
|
+
- **Estimated effort:** {{estimatedEffort}}h
|
|
24
|
+
|
|
25
|
+
| Dimension | Score |
|
|
26
|
+
|-----------|-------|
|
|
27
|
+
| Security | {{impactScores.security}}/10 |
|
|
28
|
+
| Composite | {{impactScores.composite}}/10 |
|
|
29
|
+
|
|
30
|
+
{{/each}}
|
|
31
|
+
|
|
32
|
+
## Grouped Updates
|
|
33
|
+
|
|
34
|
+
{{#each groups}}
|
|
35
|
+
### {{groupKey}} ({{items.length}} packages)
|
|
36
|
+
|
|
37
|
+
**Group urgency:** {{urgency}}
|
|
38
|
+
|
|
39
|
+
| Package | Current | Target | Type | Risk |
|
|
40
|
+
|---------|---------|--------|------|------|
|
|
41
|
+
{{#each items}}
|
|
42
|
+
| {{packageName}} | {{currentVersion}} | {{targetVersion}} | {{updateType}} | {{breakingRisk}} |
|
|
43
|
+
{{/each}}
|
|
44
|
+
|
|
45
|
+
{{/each}}
|
|
46
|
+
|
|
47
|
+
## Routine Updates
|
|
48
|
+
|
|
49
|
+
{{#each routineUpdates}}
|
|
50
|
+
- **{{packageName}}:** {{currentVersion}} -> {{targetVersion}} ({{updateType}}, {{estimatedEffort}}h)
|
|
51
|
+
{{/each}}
|
|
52
|
+
|
|
53
|
+
## Update Policy
|
|
54
|
+
|
|
55
|
+
- **Strategy:** {{policy.defaultStrategy}}
|
|
56
|
+
- **Min age:** {{policy.minAgeDays}} days
|
|
57
|
+
- **Pinned packages:** {{#if policy.pinned}}{{policy.pinned}}{{else}}None{{/if}}
|
|
58
|
+
|
|
59
|
+
---
|
|
60
|
+
|
|
61
|
+
*Generated by Next-Unicorn SKILL v2.0.0*
|
|
@@ -0,0 +1,50 @@
|
|
|
1
|
+
# Vulnerability Report Template
|
|
2
|
+
|
|
3
|
+
## Summary
|
|
4
|
+
|
|
5
|
+
| Metric | Count |
|
|
6
|
+
|--------|-------|
|
|
7
|
+
| Total dependencies scanned | {{totalDepsScanned}} |
|
|
8
|
+
| Current deps scanned | {{currentDepsScanned}} |
|
|
9
|
+
| Recommended deps scanned | {{recommendedDepsScanned}} |
|
|
10
|
+
| Critical | {{critical}} |
|
|
11
|
+
| High | {{high}} |
|
|
12
|
+
| Medium | {{medium}} |
|
|
13
|
+
| Low | {{low}} |
|
|
14
|
+
| Fixable | {{fixable}} |
|
|
15
|
+
| Unfixable | {{unfixable}} |
|
|
16
|
+
|
|
17
|
+
## Critical Findings
|
|
18
|
+
|
|
19
|
+
{{#each criticalFindings}}
|
|
20
|
+
### {{vulnerabilityId}}
|
|
21
|
+
|
|
22
|
+
- **Package:** {{packageName}}@{{installedVersion}}
|
|
23
|
+
- **Source:** {{source}}
|
|
24
|
+
- **CVSS Score:** {{cvssScore}}
|
|
25
|
+
- **Summary:** {{summary}}
|
|
26
|
+
- **Fix Available:** {{#if fixAvailable}}Upgrade to {{fixAvailable}}{{else}}No fix available{{/if}}
|
|
27
|
+
|
|
28
|
+
{{/each}}
|
|
29
|
+
|
|
30
|
+
## High Findings
|
|
31
|
+
|
|
32
|
+
{{#each highFindings}}
|
|
33
|
+
### {{vulnerabilityId}}
|
|
34
|
+
|
|
35
|
+
- **Package:** {{packageName}}@{{installedVersion}}
|
|
36
|
+
- **Source:** {{source}}
|
|
37
|
+
- **Summary:** {{summary}}
|
|
38
|
+
- **Fix Available:** {{#if fixAvailable}}Upgrade to {{fixAvailable}}{{else}}No fix available{{/if}}
|
|
39
|
+
|
|
40
|
+
{{/each}}
|
|
41
|
+
|
|
42
|
+
## Recommended Actions
|
|
43
|
+
|
|
44
|
+
1. **Immediate:** Patch all critical and high vulnerabilities with available fixes
|
|
45
|
+
2. **Short-term:** Evaluate alternatives for unfixable vulnerabilities
|
|
46
|
+
3. **Long-term:** Set up automated vulnerability scanning in CI/CD pipeline
|
|
47
|
+
|
|
48
|
+
---
|
|
49
|
+
|
|
50
|
+
*Generated by Next-Unicorn SKILL v2.0.0*
|