{"_id":"@boldbuild/audit","_rev":"3-79f150318d1817e94e3cd2effbf64b88","name":"@boldbuild/audit","dist-tags":{"latest":"0.2.1"},"versions":{"0.1.0":{"name":"@boldbuild/audit","version":"0.1.0","keywords":["audit","code-quality","security","ai","cli","devtools"],"author":{"name":"Selvin Ortiz","email":"selvin@bold.build"},"license":"MIT","_id":"@boldbuild/audit@0.1.0","maintainers":[{"name":"selvinortiz","email":"selvin@selvin.co"}],"homepage":"https://bold.build","bugs":{"url":"https://github.com/selvinortiz/boldaudit/issues"},"bin":{"boldaudit":"dist/bin/cli.js"},"dist":{"shasum":"6347d00608de2303b18f7275c187f9aef0cc3d7c","tarball":"https://registry.npmjs.org/@boldbuild/audit/-/audit-0.1.0.tgz","fileCount":8,"integrity":"sha512-GmmvMKr5qMy6p8Ukdg4EGTtwG7dpqCvIEFULYCJ6G7VFYEkpWUBZv2VZIy/g+CMJqx0YyKPOh/+Pa2o/yEwYgg==","signatures":[{"sig":"MEUCIBg45H2CTPs82raM711dyaGdysIcsrV4YfRM5Ce1/EUOAiEA6+H6EaU+kAPC16yR0JYsKpLZ3lISYWHEormlYynrZeQ=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":505605},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=18.0.0"},"gitHead":"913436b9d8f4addbd8c9223e8dc3aa4533e18878","scripts":{"dev":"tsx src/bin/cli.ts","lint":"eslint src/","test":"vitest","build":"tsup","typecheck":"tsc --noEmit","prepublishOnly":"npm run build"},"_npmUser":{"name":"selvinortiz","email":"selvin@selvin.co"},"repository":{"url":"git+https://github.com/selvinortiz/boldaudit.git","type":"git"},"_npmVersion":"11.1.0","description":"AI-powered code audit tool for production readiness","directories":{},"_nodeVersion":"22.13.1","dependencies":{"dotenv":"^16.4.7","@anthropic-ai/sdk":"^0.39.0"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.2","tsup":"^8.3.5","vitest":"^2.1.8","typescript":"^5.7.2","@types/node":"^22.0.0"},"_npmOperationalInternal":{"tmp":"tmp/audit_0.1.0_1766773771674_0.45837933142226284","host":"s3://npm-registry-packages-npm-production"}},"0.2.0":{"name":"@boldbuild/audit","version":"0.2.0","keywords":["audit","code-quality","security","ai","cli","devtools"],"author":{"name":"Selvin Ortiz","email":"selvin@bold.build"},"license":"MIT","_id":"@boldbuild/audit@0.2.0","maintainers":[{"name":"selvinortiz","email":"selvin@selvin.co"}],"homepage":"https://bold.build","bugs":{"url":"https://github.com/selvinortiz/boldaudit/issues"},"bin":{"boldaudit":"dist/bin/cli.js"},"dist":{"shasum":"d00f8144a4f5b8bd31ebd1518d620dff01790b65","tarball":"https://registry.npmjs.org/@boldbuild/audit/-/audit-0.2.0.tgz","fileCount":8,"integrity":"sha512-0Y7IHCHLkd08Ke2RqDASIcinIF89P0/h05Gz35XHFXerfED7LN/M2a6C/cF5rOCp912+c+OFJ0caKDY/rDhZXA==","signatures":[{"sig":"MEUCID/i1exDDGBaKreKSAVlXN0lvnypGmuScIq5xgbn0fnuAiEAmThHeSdeell5zJldpdtWJcwun4o+Kwk6gHNimeQiczE=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":767174},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=18.0.0"},"gitHead":"26127766b9a83795195bad4714a539674c2e8a0b","scripts":{"dev":"tsx src/bin/cli.ts","lint":"eslint src/","test":"vitest","build":"tsup","typecheck":"tsc --noEmit","prepublishOnly":"npm run build"},"_npmUser":{"name":"selvinortiz","email":"selvin@selvin.co"},"repository":{"url":"git+https://github.com/selvinortiz/boldaudit.git","type":"git"},"_npmVersion":"11.1.0","description":"AI-powered code audit tool for production readiness","directories":{},"_nodeVersion":"22.13.1","dependencies":{"dotenv":"^16.4.7","@anthropic-ai/sdk":"^0.39.0"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.2","tsup":"^8.3.5","vitest":"^2.1.8","typescript":"^5.7.2","@types/node":"^22.0.0"},"_npmOperationalInternal":{"tmp":"tmp/audit_0.2.0_1767849854713_0.4869332269500559","host":"s3://npm-registry-packages-npm-production"}},"0.2.1":{"name":"@boldbuild/audit","version":"0.2.1","description":"AI-powered code audit tool for production readiness","author":{"name":"Selvin Ortiz","email":"selvin@bold.build"},"license":"MIT","type":"module","main":"./dist/index.js","types":"./dist/index.d.ts","bin":{"boldaudit":"dist/bin/cli.js"},"scripts":{"build":"tsup","dev":"tsx src/bin/cli.ts","lint":"eslint src/","typecheck":"tsc --noEmit","test":"vitest","prepublishOnly":"npm run build"},"dependencies":{"@anthropic-ai/sdk":"^0.39.0","dotenv":"^16.4.7"},"devDependencies":{"@types/node":"^22.0.0","tsup":"^8.3.5","tsx":"^4.19.2","typescript":"^5.7.2","vitest":"^2.1.8"},"engines":{"node":">=18.0.0"},"keywords":["audit","code-quality","security","ai","cli","devtools"],"repository":{"type":"git","url":"git+https://github.com/selvinortiz/boldaudit.git"},"homepage":"https://bold.build","_id":"@boldbuild/audit@0.2.1","gitHead":"e544d997c69b3b4ba3b3d84cec765317f292e241","bugs":{"url":"https://github.com/selvinortiz/boldaudit/issues"},"_nodeVersion":"22.13.1","_npmVersion":"11.1.0","dist":{"integrity":"sha512-kJflmCOKNv2aoc0Dpsm2pI44mrec7NFA4yXYzPEV5roU0Pzt8G2U3LFC4lJ6S9hLruHnhVpUmUh1mG7z9mSZGg==","shasum":"33a4b5d849946ce3e937aee59258a2d3a9856d8c","tarball":"https://registry.npmjs.org/@boldbuild/audit/-/audit-0.2.1.tgz","fileCount":8,"unpackedSize":770394,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCID6RIvHkpYP5EXhDoiUmXGkj7kl1XhCb/bOfcN48xuQEAiEA/SN0mQhGFvjiLx9WyYIP7ci1CO5kzBHso7rauckQ2pI="}]},"_npmUser":{"name":"selvinortiz","email":"selvin@selvin.co"},"directories":{},"maintainers":[{"name":"selvinortiz","email":"selvin@selvin.co"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/audit_0.2.1_1767890080627_0.37417861088844684"},"_hasShrinkwrap":false}},"time":{"created":"2025-12-26T18:29:31.587Z","modified":"2026-01-08T16:34:41.021Z","0.1.0":"2025-12-26T18:29:31.840Z","0.2.0":"2026-01-08T05:24:15.005Z","0.2.1":"2026-01-08T16:34:40.798Z"},"bugs":{"url":"https://github.com/selvinortiz/boldaudit/issues"},"author":{"name":"Selvin Ortiz","email":"selvin@bold.build"},"license":"MIT","homepage":"https://bold.build","keywords":["audit","code-quality","security","ai","cli","devtools"],"repository":{"type":"git","url":"git+https://github.com/selvinortiz/boldaudit.git"},"description":"AI-powered code audit tool for production readiness","maintainers":[{"name":"selvinortiz","email":"selvin@selvin.co"}],"readme":"# Bold Audit\n\nAI-powered code audit tool for production readiness. Analyzes codebases for security issues, architecture problems, deployment blockers, and code quality.\n\nBuilt by [Bold](https://bold.build) to help founders with AI-built MVPs get to production.\n\n## Features\n\n- **Multi-scanner architecture**: npm audit, TypeScript checking, ESLint, secrets detection, and more\n- **AI-powered analysis**: Uses Claude to analyze architecture, Supabase configuration, and AI-generated code patterns\n- **Stack detection**: Automatically detects Next.js, React, Vue, Laravel, and other frameworks\n- **Pattern detection**: Identifies Supabase, Stripe, Clerk, Firebase, and other integrations\n- **Detailed reports**: Generates JSON and Markdown reports with actionable findings\n- **GitHub Actions**: Easy CI/CD integration\n\n## Installation\n\n```bash\nnpm install -g @boldbuild/audit\n```\n\nOr use with npx:\n\n```bash\nnpx @boldbuild/audit /path/to/project\n```\n\n## Usage\n\n### CLI\n\n```bash\n# Basic usage\nboldaudit /path/to/project\n\n# Skip AI scanners (faster, no API calls)\nboldaudit /path/to/project --skip-ai\n\n# Run specific scanners\nboldaudit /path/to/project --scanners=npm-audit,typescript,secrets\n\n# Custom output directory\nboldaudit /path/to/project --output=./my-audit-results\n\n# Verbose output\nboldaudit /path/to/project --verbose\n```\n\n### Available Scanners\n\n| Scanner | Description | Requires API Key |\n|---------|-------------|------------------|\n| `npm-audit` | Checks for known vulnerabilities in npm dependencies | No |\n| `npm-outdated` | Checks for outdated npm dependencies | No |\n| `typescript` | Checks for TypeScript compilation errors | No |\n| `eslint` | Checks for code quality issues using ESLint | No |\n| `secrets` | Detects hardcoded secrets, API keys, and credentials | No |\n| `env-check` | Checks for proper environment variable configuration | No |\n| `structure` | Analyzes project file structure and organization | No |\n| `ai-architecture` | AI-powered architecture and code quality analysis | Yes |\n| `ai-supabase` | AI-powered Supabase configuration and security analysis | Yes |\n| `ai-patterns` | Detects patterns common in AI-generated code | No |\n\n### GitHub Actions\n\nAdd to your workflow:\n\n```yaml\nname: Code Audit\n\non:\n  push:\n    branches: [main]\n  pull_request:\n    branches: [main]\n\njobs:\n  audit:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/checkout@v4\n\n      - name: Run Bold Audit\n        uses: selvinortiz/boldaudit@v1\n        with:\n          anthropic-api-key: ${{ secrets.ANTHROPIC_API_KEY }}\n          fail-on-blockers: true\n```\n\n### Programmatic Usage\n\n```typescript\nimport {\n  detectStack,\n  getApplicableScanners,\n  saveResults,\n  type AuditConfig,\n  type AuditResult,\n} from '@boldbuild/audit';\n\nconst projectPath = '/path/to/project';\n\n// Detect tech stack\nconst project = detectStack(projectPath);\nconsole.log(`Stack: ${project.stack}`);\nconsole.log(`Frameworks: ${project.frameworks.join(', ')}`);\n\n// Get applicable scanners\nconst scanners = getApplicableScanners(project);\n\n// Run scanners\nconst config: AuditConfig = {\n  projectPath,\n  outputDir: './audit-results',\n};\n\nconst results = await Promise.all(\n  scanners.map((scanner) => scanner.run(project, config))\n);\n\n// Process results...\n```\n\n## Environment Variables\n\nFor AI-powered scanners, set your Anthropic API key:\n\n```bash\nexport ANTHROPIC_API_KEY=your-api-key\n```\n\nOr create a `.env` or `.env.local` file:\n\n```\nANTHROPIC_API_KEY=your-api-key\n```\n\n## Output\n\nBold Audit generates several output files:\n\n- `report.md` - Human-readable Markdown report\n- `audit-result.json` - Complete audit results as JSON\n- `summary.json` - Summary statistics\n- `findings.json` - Flat list of all findings\n- `raw/<scanner>.json` - Individual scanner results\n\n## Finding Severity Levels\n\n| Severity | Description |\n|----------|-------------|\n| 🔴 Critical | Must be fixed before production |\n| 🟠 High | Should be fixed before production |\n| 🟡 Medium | Should be reviewed and addressed |\n| 🔵 Low | Minor issues, nice to fix |\n| ⚪ Info | Informational, no action required |\n\n## Contributing\n\nContributions are welcome! Please open an issue or submit a pull request.\n\n## License\n\nMIT License - see [LICENSE](LICENSE) for details.\n\n## Support\n\n- Website: [bold.build](https://bold.build)\n- Email: [hello@bold.build](mailto:hello@bold.build)\n- GitHub Issues: [github.com/selvinortiz/boldaudit/issues](https://github.com/selvinortiz/boldaudit/issues)\n","readmeFilename":"README.md"}