pr-checkmate 1.9.5 → 1.9.7

package/README.md

@@ -9,6 +9,8 @@
 * ✅ Enforces a unified code style across repositories.  
 * ✅ Checks `package.json` / `package-lock.json` for dependency changes.  
 * ✅ Spellcheck for code, documentation, and JSON files.  
+* ✅ Package Vulnerabilities Check
+* ✅ Scans for secrets using
 
 <br>
 > ⚠️ **Note:** Currently, PR CheckMate only supports **Node.js projects**.
@@ -39,8 +41,9 @@ npx pr-checkmate <job>
 | `lint`     | Lint code using ESLint |
 | `prettier` | Format code using Prettier |
 | `deps`     | Check project dependencies |
-| `spellcheck` | Run spellcheck via cspell |
 | `security` | Run security scan for secrets |
+| `spellcheck` | Run spellcheck via cspell |
+| `audit`      | Run `npm audit --audit-level=moderate` to check for vulnerable packages |
 
 <br>
 

package/dist/config/constants.js

@@ -77,6 +77,7 @@ exports.DEFAULT_COMMANDS = {
     'npx pr-checkmate lint': 'Lint code using ESLint',
     'npx pr-checkmate prettier': 'Format code using Prettier',
     'npx pr-checkmate deps': 'Check project dependencies',
+    'npx pr-checkmate npm-audit': 'Run package vulnerabilities check',
     'npx pr-checkmate security': 'Security scan',
     'npx pr-checkmate spellcheck': 'Run spellcheck via cspell',
 };

package/dist/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.runSecurityScan = exports.runSpellcheck = exports.runPrettier = exports.runDependencyCheck = exports.runLint = exports.hasLocalConfig = exports.getPackageConfigPath = exports.getSourcePath = void 0;
+exports.runNpmAudit = exports.runSecurityScan = exports.runSpellcheck = exports.runPrettier = exports.runDependencyCheck = exports.runLint = exports.hasLocalConfig = exports.getPackageConfigPath = exports.getSourcePath = void 0;
 exports.runAllChecks = runAllChecks;
 exports.runChecks = runChecks;
 /**
@@ -12,6 +12,8 @@ const lint_1 = require("./scripts/lint");
 const dependency_check_1 = require("./scripts/dependency-check");
 const prettier_autoformat_1 = require("./scripts/prettier-autoformat");
 const spellcheck_1 = require("./scripts/spellcheck");
+const security_1 = require("./scripts/security");
+const npm_audit_1 = require("./scripts/npm-audit");
 var config_1 = require("./config");
 Object.defineProperty(exports, "getSourcePath", { enumerable: true, get: function () { return config_1.getSourcePath; } });
 Object.defineProperty(exports, "getPackageConfigPath", { enumerable: true, get: function () { return config_1.getPackageConfigPath; } });
@@ -24,8 +26,10 @@ var prettier_autoformat_2 = require("./scripts/prettier-autoformat");
 Object.defineProperty(exports, "runPrettier", { enumerable: true, get: function () { return prettier_autoformat_2.runPrettier; } });
 var spellcheck_2 = require("./scripts/spellcheck");
 Object.defineProperty(exports, "runSpellcheck", { enumerable: true, get: function () { return spellcheck_2.runSpellcheck; } });
-var security_1 = require("./scripts/security");
-Object.defineProperty(exports, "runSecurityScan", { enumerable: true, get: function () { return security_1.runSecurityScan; } });
+var security_2 = require("./scripts/security");
+Object.defineProperty(exports, "runSecurityScan", { enumerable: true, get: function () { return security_2.runSecurityScan; } });
+var npm_audit_2 = require("./scripts/npm-audit");
+Object.defineProperty(exports, "runNpmAudit", { enumerable: true, get: function () { return npm_audit_2.runNpmAudit; } });
 /**
  * Run all checks sequentially
  * @returns Promise that resolves when all checks complete
@@ -33,7 +37,9 @@ Object.defineProperty(exports, "runSecurityScan", { enumerable: true, get: funct
 async function runAllChecks() {
     await (0, lint_1.runLint)();
     await (0, dependency_check_1.runDependencyCheck)();
+    await (0, npm_audit_1.runNpmAudit)();
     await (0, spellcheck_1.runSpellcheck)();
+    await (0, security_1.runSecurityScan)();
     await (0, prettier_autoformat_1.runPrettier)(); // Last to commit any fixes
 }
 /**

package/dist/scripts/index.js

@@ -19,6 +19,7 @@ const dependency_check_1 = require("./dependency-check");
 const prettier_autoformat_1 = require("./prettier-autoformat");
 const spellcheck_1 = require("./spellcheck");
 const security_1 = require("./security");
+const npm_audit_1 = require("./npm-audit");
 const utils_1 = require("../utils");
 const lint_1 = require("./lint");
 __exportStar(require("./dependency-check"), exports);
@@ -33,6 +34,7 @@ async function runJob(jobName) {
             case 'all':
                 await (0, lint_1.runLint)();
                 await (0, dependency_check_1.runDependencyCheck)();
+                await (0, security_1.runSecurityScan)();
                 try {
                     await (0, prettier_autoformat_1.runPrettier)();
                 }
@@ -52,6 +54,9 @@ async function runJob(jobName) {
             case 'deps':
                 await (0, dependency_check_1.runDependencyCheck)();
                 break;
+            case 'npm-audit':
+                await (0, npm_audit_1.runNpmAudit)();
+                break;
             case 'prettier':
                 await (0, prettier_autoformat_1.runPrettier)();
                 break;

package/dist/scripts/npm-audit.js

@@ -0,0 +1,46 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runNpmAudit = runNpmAudit;
+const utils_1 = require("../utils");
+const node_path_1 = __importDefault(require("node:path"));
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_child_process_1 = require("node:child_process");
+const node_util_1 = require("node:util");
+const execAsync = (0, node_util_1.promisify)(node_child_process_1.exec);
+/**
+ * Run npm audit on the current project
+ */
+async function runNpmAudit() {
+    utils_1.logger.info('🛡️ Running npm audit...');
+    const projectRoot = process.cwd();
+    const packageJsonPath = node_path_1.default.join(projectRoot, 'package.json');
+    if (!node_fs_1.default.existsSync(packageJsonPath)) {
+        utils_1.logger.warn('[runNpmAudit]: ⚠️ No package.json found in project root — skipping npm audit');
+        return;
+    }
+    try {
+        const { stdout, stderr } = await execAsync('npm audit --audit-level=moderate', {
+            cwd: projectRoot,
+        });
+        if (stdout) {
+            utils_1.logger.info(stdout);
+        }
+        if (stderr) {
+            utils_1.logger.warn(stderr);
+        }
+        utils_1.logger.info('[runNpmAudit]: ✅ NPM audit finished successfully');
+    }
+    catch (error) {
+        const err = error;
+        utils_1.logger.error('[runNpmAudit]: ❌ NPM audit found issues');
+        if (err.stdout)
+            utils_1.logger.error(err.stdout);
+        if (err.stderr)
+            utils_1.logger.warn(err.stderr);
+        if (!err.stdout && !err.stderr)
+            utils_1.logger.error(err.message);
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "pr-checkmate",
-    "version": "1.9.5",
+    "version": "1.9.7",
     "description": "Automated PR quality checks: linting, formatting, dependency analysis, and spellcheck",
     "keywords": [
         "github-actions",