From 245714936b34ca3a4017bf49c48666daec15f37d Mon Sep 17 00:00:00 2001 From: ayobamiseun Date: Sun, 26 Jul 2026 13:43:20 +0100 Subject: [PATCH] =?UTF-8?q?docs(security):=20align=20audit=20phrasing=20?= =?UTF-8?q?=E2=80=94=20the=20ecosystem's=20dependency=20audit?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 'Native dependency audit' collides with the established meaning of native dependencies (compiled modules); use the same unambiguous phrasing as the shipping-and-launch checkbox in this PR. --- references/security-checklist.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/references/security-checklist.md b/references/security-checklist.md index fef22e73..0f656479 100644 --- a/references/security-checklist.md +++ b/references/security-checklist.md @@ -181,7 +181,7 @@ res.status(500).json({ | 3 | Injection | Parameterized queries, input validation | | 4 | Insecure Design | Threat modeling, spec-driven development | | 5 | Security Misconfiguration | Security headers, minimal permissions, audit deps | -| 6 | Vulnerable Components | Native dependency audit (`npm audit`, `pip-audit`, ...), keep deps updated, minimal deps | +| 6 | Vulnerable Components | The ecosystem's dependency audit (`npm audit`, `pip-audit`, ...), keep deps updated, minimal deps | | 7 | Auth Failures | Strong passwords, rate limiting, session management | | 8 | Data Integrity Failures | Verify updates/dependencies, signed artifacts | | 9 | Logging Failures | Log security events, don't log secrets |