Lucas Berger 3e609b2550 fix(16): WR-04 relabel/clarify outdated advisory tier (no false promise) ...

The AUDIT-ADVISORY tier cross-checks pnpm outdated (direct deps) against
advisory module_names (mostly transitive), so it almost never fires.
Relabel to OUTDATED-WITH-ADVISORY and document the limitation in the
header, header text, and inline comment; point to check-audit.mjs as the
authoritative advisory gate. No risky full-tree rewrite.

2026-06-13 08:43:54 -04:00

..

__tests__

fix(16): CR-01 enforce audit-waiver expiry; IN-01 realpath isMain

2026-06-13 08:42:08 -04:00

audit-allowlist.json

chore(16-02): seed audit allowlist (esbuild GHSA waiver) + outdated pin reasons

2026-06-13 05:17:13 -04:00

check-audit.mjs

fix(16): CR-01 enforce audit-waiver expiry; IN-01 realpath isMain

2026-06-13 08:42:08 -04:00

check-outdated.mjs

fix(16): WR-04 relabel/clarify outdated advisory tier (no false promise)

2026-06-13 08:43:54 -04:00

gitleaks-baseline.json

chore(16-04): commit gitleaks full-history baseline

2026-06-13 08:14:54 -04:00

outdated-pins.json

chore(16-02): seed audit allowlist (esbuild GHSA waiver) + outdated pin reasons

2026-06-13 05:17:13 -04:00