@vibecodeqa/cli 0.20.0 → 0.21.0

package/dist/runners/best-practices.js

@@ -178,6 +178,132 @@ export function runBestPractices(cwd) {
     else {
         issues.push({ severity: "info", message: "No Dependabot/Renovate — dependency updates are manual and often forgotten", rule: "automated-deps" });
     }
+    // ── 5. Code Quality Tooling ──
+    // Linter configured
+    practices++;
+    if (has("biome.json") || has(".eslintrc.json") || has(".eslintrc.js") || has("eslint.config.js") || has("eslint.config.ts") || has("analysis_options.yaml")) {
+        followed++;
+    }
+    else {
+        issues.push({ severity: "warning", message: "No linter config (ESLint/Biome/dart analyze) — code style not enforced", rule: "linter-config" });
+    }
+    // Formatter configured
+    practices++;
+    if (has("biome.json") || has(".prettierrc") || has(".prettierrc.json") || has("prettier.config.js") || has(".editorconfig")) {
+        followed++;
+    }
+    else {
+        issues.push({ severity: "info", message: "No formatter config (Prettier/Biome/.editorconfig) — inconsistent code formatting", rule: "formatter-config" });
+    }
+    // TypeScript strict mode
+    practices++;
+    const tsconfig = read("tsconfig.json");
+    if (!tsconfig || tsconfig.includes('"strict": true') || tsconfig.includes('"strict":true')) {
+        followed++;
+    }
+    else {
+        issues.push({ severity: "info", message: "TypeScript strict mode not enabled — allows implicit any and null errors", rule: "ts-strict-mode" });
+    }
+    // ── 6. Testing Best Practices ──
+    // Test script exists
+    practices++;
+    if (pkg.includes('"test"') || has("pubspec.yaml")) {
+        followed++;
+    }
+    else {
+        issues.push({ severity: "warning", message: "No test script in package.json — testing not configured", rule: "test-script" });
+    }
+    // Coverage configured
+    practices++;
+    if (pkg.includes("coverage") || has("vitest.config.ts") || has("jest.config.ts") || has("jest.config.js")) {
+        followed++;
+    }
+    else {
+        issues.push({ severity: "info", message: "No test coverage configuration — coverage thresholds not enforced", rule: "coverage-config" });
+    }
+    // ── 7. Docker / Deployment ──
+    // Dockerfile best practices (if Docker is used)
+    if (has("Dockerfile") || has("docker-compose.yml") || has("docker-compose.yaml")) {
+        practices++;
+        const dockerfile = read("Dockerfile");
+        if (dockerfile.includes("FROM") && !dockerfile.includes("latest")) {
+            followed++;
+        }
+        else if (dockerfile.includes(":latest")) {
+            issues.push({ severity: "warning", message: "Dockerfile uses :latest tag — pin to a specific version for reproducible builds", rule: "docker-pin-version" });
+        }
+        else {
+            followed++;
+        }
+        // Multi-stage build
+        practices++;
+        const fromCount = (dockerfile.match(/^FROM /gm) || []).length;
+        if (fromCount >= 2) {
+            followed++;
+        }
+        else if (dockerfile.length > 100) {
+            issues.push({ severity: "info", message: "Dockerfile is single-stage — consider multi-stage to reduce image size", rule: "docker-multi-stage" });
+        }
+        else {
+            followed++;
+        }
+        // .dockerignore
+        practices++;
+        if (has(".dockerignore")) {
+            followed++;
+        }
+        else {
+            issues.push({ severity: "info", message: "No .dockerignore — node_modules and build artifacts will bloat Docker image", rule: "dockerignore" });
+        }
+    }
+    // ── 8. Git Practices ──
+    // .gitignore is comprehensive
+    practices++;
+    const gitignore = read(".gitignore");
+    if (gitignore.includes("node_modules") || gitignore.includes(".dart_tool") || gitignore.includes("build/")) {
+        followed++;
+    }
+    else if (gitignore) {
+        issues.push({ severity: "info", message: ".gitignore exists but may be incomplete — ensure build artifacts are excluded", rule: "gitignore-complete" });
+    }
+    else {
+        followed++; // no gitignore = handled by structure check
+    }
+    // Conventional commits signal (commitlint or similar)
+    practices++;
+    if (deps.commitlint || deps["@commitlint/cli"] || has("commitlint.config.js") || has(".commitlintrc.json") || has(".changeset")) {
+        followed++;
+    }
+    else {
+        issues.push({ severity: "info", message: "No commit convention enforcement (commitlint/changesets) — changelog generation is manual", rule: "conventional-commits" });
+    }
+    // ── 9. Monitoring & Observability ──
+    // Error tracking (Sentry, Bugsnag, etc.) — only for apps/servers, not CLI tools
+    const isApp = deps.react || deps.vue || deps.svelte || deps.express || deps.fastify || deps.hono || deps.next || deps.nuxt;
+    if (isApp) {
+        practices++;
+        if (deps["@sentry/node"] || deps["@sentry/react"] || deps["@sentry/browser"] || deps.bugsnag || deps["@bugsnag/js"]) {
+            followed++;
+        }
+        else {
+            issues.push({ severity: "info", message: "No error tracking (Sentry/Bugsnag) — production errors may go unnoticed", rule: "error-tracking" });
+        }
+    }
+    // ── 10. API & Configuration ──
+    // Environment validation (zod, joi, envalid)
+    practices++;
+    if (deps.zod || deps.joi || deps.envalid || deps["@t3-oss/env-core"] || deps["@t3-oss/env-nextjs"]) {
+        followed++;
+    }
+    else {
+        const hasEnvUsage = pkg.includes("process.env") || read("src/index.ts").includes("process.env") || read("src/main.ts").includes("process.env");
+        if (hasEnvUsage) {
+            issues.push({ severity: "info", message: "Uses env vars but no validation library (zod/envalid) — missing vars crash at runtime", rule: "env-validation" });
+        }
+        else {
+            followed++;
+        }
+    }
     // ── Score ──
     const pct = practices > 0 ? Math.round((followed / practices) * 100) : 100;
     const score = pct;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibecodeqa/cli",
-  "version": "0.20.0",
+  "version": "0.21.0",
   "description": "Code health scanner for the AI coding era. 21 checks, zero config, full report.",
   "type": "module",
   "bin": {