Initial commit: vTicker - Verus DeFi Analytics Platform #1

	name: Security Audit

	on:
	push:
	branches: [ main ]
	pull_request:
	branches: [ main ]
	schedule:
	# Run weekly on Mondays at 9 AM UTC
	- cron: '0 9 * * 1'

	jobs:
	security-audit:
	name: Security Audit
	runs-on: ubuntu-latest

	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Setup Node.js
	uses: actions/setup-node@v4
	with:
	node-version: '20'
	cache: 'npm'

	- name: Install dependencies
	run: npm ci

	- name: Run npm audit
	run: npm audit --audit-level=high
	continue-on-error: false

	- name: Check for outdated dependencies
	run: npm outdated \|\| true

	build-test:
	name: Build & Type Check
	runs-on: ubuntu-latest

	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Setup Node.js
	uses: actions/setup-node@v4
	with:
	node-version: '20'
	cache: 'npm'

	- name: Install dependencies
	run: npm ci

	- name: Run ESLint
	run: npm run lint

	- name: Type check
	run: npx tsc --noEmit

	- name: Build application
	run: npm run build

	lock-file-check:
	name: Verify Lock File Integrity
	runs-on: ubuntu-latest

	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Setup Node.js
	uses: actions/setup-node@v4
	with:
	node-version: '20'

	- name: Verify package-lock.json integrity
	run: \|
	npm ci --dry-run
	if [ $? -ne 0 ]; then
	echo "Error: package-lock.json is out of sync with package.json"
	exit 1
	fi

Provide feedback