adhit-r / adhit-r/aran

Enhance Security, Monitoring, and Dependency Hygiene

Open
#44 0 comments 0 reactions 1 assignee Claimed by @adhit-r View on GitHub
enhancement security
Dominant language
TypeScript
Stars
4
Forks
0
PR merge metrics
No merged PRs in 30d

Description

**Goal**: Strengthen production readiness with auditing, logging, validation, and basic rate limiting.

---

### Tasks
- Add `npm audit` to CI for vulnerability checks
- Set up Dependabot for automated dependency updates
- Build logging utilities (see `/src/lib/logger.ts` example)
- Validate required environment variables on startup
- Implement simple rate limiting middleware in `/src/middleware.ts`

**References:** See [QUICK_WINS.md](https://github.com/adhit-r/aran/blob/main/QUICK_WINS.md)

**Acceptance Criteria**
- CI fails on high vulnerabilities
- Automatic PRs for outdated dependencies
- New logger and env validation modules
- Rate limiting at entry for app endpoints

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.