audit-trace 0.1.6 → 0.1.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +17 -0
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -46,8 +46,24 @@ cd your-project
|
|
|
46
46
|
audit-trace report
|
|
47
47
|
audit-trace report --json
|
|
48
48
|
audit-trace report --ci --fail-on high --prod-only
|
|
49
|
+
audit-trace brief
|
|
49
50
|
```
|
|
50
51
|
|
|
52
|
+
### AI-ready brief (vibe coding)
|
|
53
|
+
|
|
54
|
+
```bash
|
|
55
|
+
audit-trace brief
|
|
56
|
+
audit-trace brief --top 3 --prod-only
|
|
57
|
+
audit-trace brief --json
|
|
58
|
+
```
|
|
59
|
+
|
|
60
|
+
Produces a **prioritized fix plan** with ownership context and a **paste-ready prompt block** for AI assistants (Cursor, Copilot, etc.). When no vulnerabilities are found, output switches to a clean status message instead of an empty fix plan.
|
|
61
|
+
|
|
62
|
+
- `--top <n>` — max action groups (default: `5`)
|
|
63
|
+
- `--pkg <name>` — focus on one vulnerable package
|
|
64
|
+
- `--no-prompt` — omit the AI prompt block
|
|
65
|
+
- `--prod-only`, `--audit-file`, `--pm` — same as `report`
|
|
66
|
+
|
|
51
67
|
### Interactive UI (Ink)
|
|
52
68
|
|
|
53
69
|
```bash
|
|
@@ -61,6 +77,7 @@ Use **↑/↓** to browse findings, **q** to quit.
|
|
|
61
77
|
| Command | Description |
|
|
62
78
|
|--------|-------------|
|
|
63
79
|
| `report` (default) | Run package-manager audit + lockfile graph; print ownership paths & remediation hints |
|
|
80
|
+
| `brief` | AI-ready security brief with prioritized fix plan and paste-ready prompt |
|
|
64
81
|
| `why <pkg>` | Shortest path(s) from workspace root(s) to a package in the lockfile graph |
|
|
65
82
|
| `graph <pkg>` | Enumerate paths (capped) between roots and the package |
|
|
66
83
|
| `impact <pkg>` | Transitive consumers (reverse reachability in the graph) |
|