curriculum-project-hub/.scratch/saas-production-readiness/issues/21-clear-dependency-security-advisories.md

Clear dependency advisories and gate releases

Type: task Status: open

Question

Remove every current npm audit --omit=dev high finding and every cargo audit vulnerability/unsound finding through tested upgrades, compatible overrides or upstream fixes—not ignores—and add reproducible Node and Rust security-audit gates to CI and the production release evidence.