Last Updated: November 21, 2025
Dependency Hygiene
| Check | Action |
|---|---|
npm audit
|
Fail on high CVEs |
npm outdated
|
Update libs |
lockfile
|
Commit with CI |
Commands
helmet()
Set secure headers
dotenv-safe
Enforce env keys
npm audit fix
Auto-fix vulnerabilities
Monitoring
Log suspicious input, enforce CSP, and keep dependencies trimmed.
💡 Pro Tip:
Use npm audit during CI, rotate secrets, and shield headers.