Skip to content

Add OpenAI Agents JS lockfile example and verified case study#501

Open
Ayush7614 wants to merge 1 commit into
OWASP:mainfrom
Ayush7614:ayush12
Open

Add OpenAI Agents JS lockfile example and verified case study#501
Ayush7614 wants to merge 1 commit into
OWASP:mainfrom
Ayush7614:ayush12

Conversation

@Ayush7614
Copy link
Copy Markdown
Contributor

Summary

  • Adds lockfile-only snapshot examples/openai-agents-js/ from openai/openai-agents-js@f76fc19 (package.json + pnpm-lock.yaml).
  • Documents verified baseline scan in website/docs/case-studies/openai-agents-js.md (1,683 packages, 31 findings, pnpm audit comparison).
  • Bundles logo at website/static/img/openai-agents-js-logo.svg.
  • Frames 0 direct / 31 transitive per maintainer review on Add OpenAI Agents JS lockfile example and verified case study #490: parent-tracing narrative, one pnpm add verdaccio@6.7.2 command, MCP/Daytona clusters.
  • Includes Remaining risk, full 31-row Baseline findings table, and Want your project reviewed?

Closes #490

Test plan

  • npm run build && node dist/index.js examples/openai-agents-js --verbose --all — 31 findings (0 critical · 13 high · 16 medium · 2 low), 0 direct
  • Generated command: pnpm add verdaccio@6.7.2 (1/31 first-pass coverage)
  • pnpm audit (Node 22+, pnpm 10.14.0) — 52 entries documented
  • cd website && npm run build — Docusaurus build succeeds

Made with Cursor

Snapshot openai/openai-agents-js pnpm lockfile (1,683 packages,
31 all-transitive findings) with parent-tracing narrative, one
verdaccio fix command, and pnpm audit comparison.
Copy link
Copy Markdown
Collaborator

@sonukapoor sonukapoor left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The all-transitive framing is documented well, and the one concrete verdaccio parent upgrade makes this more useful than a pure zero-output study. The framing note in Summary sets honest expectations.

Same CHANGELOG issue as #500: the second bullet references VS Code in [Unreleased], but VS Code shipped in v1.18.1. Please remove the second bullet or trim it to reference OpenAI Agents JS only.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add OpenAI Agents JS lockfile example and verified case study

2 participants