oke-py / npm-audit-action / 29318418149

94%

push

github

docs: state the action's scope and document the monorepo matrix pattern (#378)

## Summary
- Add a **Scope: when to use this action** section to the README,
positioning the action as a small `npm audit` CI gate — no external
service or token, blocks vulnerabilities at pull request time, detection
and reporting only — and pointing to Dependabot security updates / `npm
audit fix` for remediation and to dedicated scanners for deeper
analysis. This declares the project scope explicitly (context: #4).
- Add a **Monorepos** section documenting the `strategy.matrix` pattern
for auditing multiple packages, including the tip of embedding the
directory in `issue_title` so `dedupe_issues` works per package. This
addresses the use case of #72 without adding glob/array handling to the
action itself.

Refs #4, #72

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

181 of 192 branches covered (94.27%)

Branch coverage included in aggregate %.

247 of 255 relevant lines covered (96.86%)

260.99 hits per line