ai-project-maintainer 0.3.0 → 0.3.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -1,8 +1,9 @@
1
1
  # AI Project Maintainer
2
2
 
3
- ![AI coding](https://img.shields.io/badge/built%20for-AI%20coding-111827)
4
- ![Production audit](https://img.shields.io/badge/gate-production%20audit-0f766e)
5
- ![Account free](https://img.shields.io/badge/default-account%20free-2563eb)
3
+ ![AI coding](https://img.shields.io/badge/built%20for-AI%20coding-111827)
4
+ ![Production audit](https://img.shields.io/badge/gate-production%20audit-0f766e)
5
+ ![Account free](https://img.shields.io/badge/default-account%20free-2563eb)
6
+ [![npm](https://img.shields.io/npm/v/ai-project-maintainer.svg)](https://www.npmjs.com/package/ai-project-maintainer)
6
7
  [![CI](https://github.com/xixifusi1213-gif/ai-project-maintainer/actions/workflows/ci.yml/badge.svg)](https://github.com/xixifusi1213-gif/ai-project-maintainer/actions/workflows/ci.yml)
7
8
 
8
9
  **A production-readiness gate for AI-coded projects.**
@@ -30,11 +31,13 @@ AI coding makes it easy to ship code that looks complete but quietly misses prod
30
31
 
31
32
  `ai-project-maintainer` makes those gaps visible before they become production surprises.
32
33
 
33
- ## The 3-Minute Flow
34
-
35
- ```powershell
36
- # 1. Add local and CI guardrails
37
- npx ai-project-maintainer init "E:\my-project" --profile oss --ci github
34
+ ## The 3-Minute Flow
35
+
36
+ Requires Node.js 20+.
37
+
38
+ ```powershell
39
+ # 1. Add local and CI guardrails
40
+ npx ai-project-maintainer init "E:\my-project" --profile oss --ci github
38
41
 
39
42
  # 2. Create the production audit intake templates
40
43
  npx ai-project-maintainer init-audit "E:\my-project"
@@ -43,10 +46,10 @@ npx ai-project-maintainer init-audit "E:\my-project"
43
46
  npx ai-project-maintainer audit-plan "E:\my-project" --output reports/audit-plan.json
44
47
 
45
48
  # 4. Run the production gate
46
- npx ai-project-maintainer gate "E:\my-project" --production --strict --release --output reports/security-report.json
47
- ```
48
-
49
- No npm publication is required for GitHub Actions. The generated workflow clones this repository and runs the Node scripts directly.
49
+ npx ai-project-maintainer gate "E:\my-project" --production --strict --release --output reports/security-report.json
50
+ ```
51
+
52
+ GitHub Actions templates can either use the npm package or clone this repository directly.
50
53
 
51
54
  ## What It Checks
52
55
 
@@ -1,8 +1,18 @@
1
- # 升级路线图
2
-
3
- ## V2:开源维护者专业半自动平台
4
-
5
- 当前目标:
1
+ # 升级路线图
2
+
3
+ ## v0.4.0:真实案例和重型安全 CI
4
+
5
+ 下一阶段优先增强:
6
+
7
+ - 新增可复现的 `examples/demo-ai-app`,展示 `FAIL/GAP -> 修复 -> PASS` 的完整闭环。
8
+ - 新增独立 `security.yml`,安装并运行 Gitleaks、Trivy、Semgrep 等真实阻断型扫描。
9
+ - 制作 90 秒 GIF/视频,演示项目画像、审计计划、CI 门禁、证据报告和 AI 修复循环。
10
+
11
+ `v0.3.1` 只做可信发布补强,不新增重型扫描能力。
12
+
13
+ ## V2:开源维护者专业半自动平台
14
+
15
+ 当前目标:
6
16
 
7
17
  - 提供 npm/npx CLI。
8
18
  - 保留 Codex skill 和旧 Node 脚本兼容。
package/package.json CHANGED
@@ -1,11 +1,35 @@
1
1
  {
2
- "name": "ai-project-maintainer",
3
- "version": "0.3.0",
4
- "description": "Production-readiness audit and CI gate for AI-coded projects.",
5
- "type": "module",
6
- "files": [
7
- "ai-project-maintainer/",
8
- "docs/",
2
+ "name": "ai-project-maintainer",
3
+ "version": "0.3.1",
4
+ "description": "Production-readiness audit and CI gate for AI-coded projects.",
5
+ "type": "module",
6
+ "license": "MIT",
7
+ "repository": {
8
+ "type": "git",
9
+ "url": "git+https://github.com/xixifusi1213-gif/ai-project-maintainer.git"
10
+ },
11
+ "bugs": {
12
+ "url": "https://github.com/xixifusi1213-gif/ai-project-maintainer/issues"
13
+ },
14
+ "homepage": "https://github.com/xixifusi1213-gif/ai-project-maintainer#readme",
15
+ "keywords": [
16
+ "ai-coding",
17
+ "devsecops",
18
+ "security",
19
+ "production-readiness",
20
+ "github-actions",
21
+ "semgrep",
22
+ "trivy",
23
+ "gitleaks",
24
+ "codex",
25
+ "ai-agents"
26
+ ],
27
+ "engines": {
28
+ "node": ">=20"
29
+ },
30
+ "files": [
31
+ "ai-project-maintainer/",
32
+ "docs/",
9
33
  "README.md"
10
34
  ],
11
35
  "bin": {