New:Introducing Socket Scanning for VS Code Marketplace Extensions.Learn more →
Get Started

@autorel/holygrail

Package Overview
Dependencies
Maintainers
1
Versions
2
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@autorel/holygrail

Vibecoding Holygrail — Production readiness test kit for JS/TS projects

latest
Source
npmnpm
Version
0.1.6
Version published
Maintainers
1
Created
Source

Vibecoding Holygrail

Vibecoding Holygrail is an MVP CLI tool that scans JavaScript/TypeScript projects and produces a production-readiness report.

Installation

  • npm install
  • npm link

Usage

  • holygrail (runs scan on current folder)
  • holygrail --no-docker --json (skip docker checks, output JSON)

Features

  • Code quality, Security, Infrastructure, Database, Performance, Observability checks
  • AST-based scanning via @babel/parser
  • Dockerfile validations (optional)
  • JSON report output (holygrail-report.json)

Extensibility

Add more checks by editing files under src/checks and exporting runChecks.

Scoring

Score starts at 100. Failures subtract:

  • critical: 15
  • high: 10
  • medium: 5
  • low: 2

Keywords

production

FAQs

Package last updated on 21 Nov 2025

Related posts