tooling-js-ts

Auditing a JavaScript or TypeScript project involves running static analysis with ESLint and tsc, coverage tools like vitest or jest, and security scanners like retire.js and npm audit to identify code quality and vulnerability issues.

For dead-code and dependency analysis in TypeScript projects, tools like Knip and Madge are used to detect unused files and dependencies, improving overall maintainability during the audit phase.

Yes, the automated JS/TS audit suite supports test-coverage reporting using either vitest or jest, allowing you to identify coverage gaps in your JavaScript and TypeScript projects based on your preferred testing framework.

Yes, you can run mutation testing on a JavaScript codebase using Stryker to check test resilience. This process deliberately introduces code changes to verify if your existing test suite detects the mutations.

The best way to check an npm project for security vulnerabilities is to run package audits using npm audit and retire.js, which automatically scan your dependencies for known security flaws and compliance issues.

No, you do not need to install the audit tools globally. You can execute the JS/TS audit toolset in your project by installing the required packages locally or invoking them via npx for safe default scanning.