/iblai-vibe-security-dependency-audit

Audit project dependencies, frameworks, language runtimes, and dev tools for known CVEs, security anti-patterns, and supply-chain risks.

Do NOT trust a CVE listing without verifying it applies to the installed version. Every finding ships with a fix version or remediation step.

Step 1: Inventory the Stack

Catalog everything in use — direct deps and the chain below them.

Package manifests — read and catalog: