ahochsteger / gmail-processor / 30197089894

98%

push

github

chore(ci): make security audit step non-blocking and target runtime deps

Update `all:audit-security` script in `package.json` to audit production
dependencies (`--omit=dev --audit-level high || true`) and mark the
`audit-security` CI workflow step in `ci.yaml` with `continue-on-error: true`.

This prevents transitive dev-dependency advisories (e.g. in Docusaurus,
Webpack dev server) and npm registry API errors from blocking PR builds,
while preserving security advisory reporting alongside CodeQL static analysis.

AI-Assisted: true
AI-Tool: Antigravity

1039 of 1067 branches covered (97.38%)

Branch coverage included in aggregate %.

8851 of 8974 relevant lines covered (98.63%)

87.46 hits per line