Audit Production npm Dependencies with GitHub Actions
Use npm audit in GitHub Actions to detect high-severity vulnerabilities in frontend packages shipped to production.
Editorial Hub
Browse Drupal tutorials, gadget field notes, and sharp explainers on the topics worth publishing clearly.
Featured writing
Use npm audit in GitHub Actions to detect high-severity vulnerabilities in frontend packages shipped to production.
Apply PHPCS security rules to custom Drupal modules and themes while excluding third-party code.
Run PHPStan against custom Drupal code in GitHub Actions to find type errors and unsafe code paths.
Latest articles
Use npm audit in GitHub Actions to detect high-severity vulnerabilities in frontend packages shipped to production.
Apply PHPCS security rules to custom Drupal modules and themes while excluding third-party code.
Run PHPStan against custom Drupal code in GitHub Actions to find type errors and unsafe code paths.
Detect malformed Twig templates in custom Drupal modules and themes using djLint in a fast GitHub Actions job.
Audit locked PHP dependencies for known vulnerabilities and abandoned packages with Composer and GitHub Actions.
Run ESLint and Stylelint against a custom Drupal theme to catch frontend defects and inconsistent code before release.
Use Gitleaks in GitHub Actions to detect credentials and tokens in the current checkout without exposing findings.
Test common pages across environments and publish Lighthouse performance, accessibility, best-practices, and SEO scores.