
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
a11y-safe-autofix
Advanced tools
Apply conservative, low-risk accessibility fixes with a dry-run first. Dry-run by default so CI can fail safely without edits.
Type: CLI (Node.js)
[!IMPORTANT] Dry-run mode is default. Use
--writeonly after reviewing the report.
Example artifacts live in examples/.
Need help? Start with docs/troubleshooting.md.
npx a11y-safe-autofix --paths .
- name: Dry-run accessibility fixes
run: npx a11y-safe-autofix --paths src --check --json

a11y-safe-autofix --paths src --check
Guarantees
alt on <img> when --write is set.Non-Goals
Accessibility requires more than automated fixes. Treat this as baseline hygiene, not compliance.
More: docs/README.md
See examples/README.md for inputs and expected outputs.
Open a PR to add your org.
See CONTRIBUTING.md.
MIT
FAQs
CLI that applies safe accessibility autofixes with dry-run support.
We found that a11y-safe-autofix demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.