Skip to content

Add Lit lockfile example and verified case study#499

Open
Ayush7614 wants to merge 2 commits into
OWASP:mainfrom
Ayush7614:ayush10
Open

Add Lit lockfile example and verified case study#499
Ayush7614 wants to merge 2 commits into
OWASP:mainfrom
Ayush7614:ayush10

Conversation

@Ayush7614
Copy link
Copy Markdown
Contributor

Summary

  • Adds lockfile-only snapshot examples/lit/ from lit/lit@20afabd (package.json + package-lock.json).
  • Documents verified baseline scan in website/docs/case-studies/lit.md (2,059 packages, 99 findings, npm audit comparison).
  • Hosts Lit logo at website/static/img/lit-logo.svg (from repo packages/lit/logo-dark.svg).
  • Includes Remaining risk, full 99-row Baseline findings table, and Want your project reviewed?

Test plan

  • npm run build && node dist/index.js examples/lit --verbose --all — 99 findings (5 critical · 52 high · 33 medium · 9 low)
  • npm audit — 107 entries documented in case study
  • cd website && npm run build — Docusaurus build succeeds
  • First-pass fix coverage: 13 of 99 findings (4 command groups)

Made with Cursor

Ayush7614 added 2 commits May 30, 2026 05:16
Snapshot lit/lit npm workspace lockfile (2,059 packages, 99 findings)
with full case study sections, local logo, and npm audit comparison.
Reorder bullets so direct deps, fix commands, and first-pass
coverage appear before the raw 99-finding count.
Copy link
Copy Markdown
Collaborator

@sonukapoor sonukapoor left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good work on the Lit study — three direct rollup majors with matching workspace-scoped upgrades is exactly the pattern that makes a case study useful. Before merging: the branch has 2 commits. Please squash them into one (git rebase -i origin/main, then git push --force-with-lease).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants