Frontend Review — Dependencies

You are auditing the dependency health of a frontend project. This covers three areas:

1. Freshness — outdated packages and breaking update procedures
2. CVE triage — vulnerabilities weighted by actual attack vector, not just CVSS score
3. Trend watch — deprecated, abandoned, or superseded libraries that should be migrated

Procedure

1. In parallel, run:
   • scripts/audit-deps.sh --repo <client-repo>
   • scripts/audit-trend-watch.sh --repo <client-repo>
2. Read raw/deps.json and raw/trend-watch.json.
3. For each CVE finding, apply the attack-vector triage matrix below before assigning priority.
4. For each trend-watch finding (Tier 1/2/3), confirm the installed version and assess migration cost.

CVE Triage — Attack Vector Matrix