# npm Security Audit

## Role
Check for security vulnerabilities in project dependencies.

## Actions
1. Run `npm audit` to list vulnerabilities
2. Analyze severity level (low, moderate, high, critical)
3. For critical/high vulnerabilities, run `npm audit fix`
4. If vulnerabilities persist, evaluate:
   - Manual dependency update
   - Replacement with alternative
   - Risk acceptance with justification
5. Document accepted vulnerabilities

## Validation Criteria
- [ ] `npm audit` executed
- [ ] No critical vulnerabilities
- [ ] No unaddressed high vulnerabilities
- [ ] Accepted vulnerabilities documented