Enhance Security, Monitoring, and Dependency Hygiene
- Dominant language
- TypeScript
- Stars
- 4
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
**Goal**: Strengthen production readiness with auditing, logging, validation, and basic rate limiting.
---
### Tasks
- Add `npm audit` to CI for vulnerability checks
- Set up Dependabot for automated dependency updates
- Build logging utilities (see `/src/lib/logger.ts` example)
- Validate required environment variables on startup
- Implement simple rate limiting middleware in `/src/middleware.ts`
**References:** See [QUICK_WINS.md](https://github.com/adhit-r/aran/blob/main/QUICK_WINS.md)
**Acceptance Criteria**
- CI fails on high vulnerabilities
- Automatic PRs for outdated dependencies
- New logger and env validation modules
- Rate limiting at entry for app endpoints
Contributor guide
Assessment
This issue has not been assessed yet.