@radhya/mach 2.4.4 → 2.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -63,7 +63,7 @@ mach build --platform android
63
63
  | `mach config` | Show resolved configuration for a build profile |
64
64
  | `mach start` | Start the Metro development server |
65
65
  | `mach device` | Register test devices for ad-hoc distribution |
66
- | `mach audit` | Run automated security checks on your project |
66
+ | `mach audit` | Check project health, delivery impact, and security locally |
67
67
  | `mach agent` | Manage the local device discovery agent for Install Hub |
68
68
  | `mach host` | Set up S3 static hosting and CloudFront |
69
69
  | `mach sitemap` | Generate sitemap.xml from Expo Router app routes |
@@ -644,15 +644,27 @@ mach start --clear
644
644
  When running an Expo app, `mach start` keeps the normal Expo keyboard flow available:
645
645
  press `i` for iOS, `a` for Android, `w` for web, and `r` to reload. Use the flags above when CI/scripts or muscle memory should launch a target immediately.
646
646
 
647
- ## Security Audit
647
+ ## Project Audit
648
+
649
+ `mach audit` combines doctor-style environment checks, delivery-impact advice,
650
+ and security scanning in one offline-friendly command. It validates Mach config,
651
+ framework and profile consistency, app identifiers, Node/lockfile health, Expo
652
+ dependency alignment, permissions, secrets, dependencies, storage, networking,
653
+ and native manifests when available.
648
654
 
649
655
  ```bash
650
656
  mach audit
657
+ mach audit --category project
658
+ mach audit --category impact
659
+ mach audit --since origin/main # OTA vs native build/store-review guidance
651
660
  mach audit --severity high
652
661
  mach audit --fix
653
662
  mach audit --json # CI/CD-friendly JSON output
654
663
  ```
655
664
 
665
+ Local project audits do not require a Mach login. Authentication is required
666
+ only when `--apk build:<build-id>` asks Mach to download a managed artifact.
667
+
656
668
  ## Authentication
657
669
 
658
670
  ### Interactive