Question 1

What files do I need to upload?

Accepted Answer

The code health check requires three inputs: package.json, a lockfile (package-lock.json, yarn.lock or pnpm-lock.yaml), and a build log in .log or .txt format. npm audit --json is optional and can add vulnerability findings to the check.

Question 2

How can I share the files responsibly?

Accepted Answer

Share only the files needed for the check. Remove secrets, tokens, private keys and other sensitive information before uploading. Do not upload build logs or audit results that contain secrets.

Question 3

What does the report include?

Accepted Answer

The report brings together a summary of findings, evidence with file references, an explanation of each finding and a concrete remediation suggestion. Findings are distinguished as blockers, warnings or informational items.

Question 4

What should I do after reading the report?

Accepted Answer

Review the priorities with your team and start with the recommended action for each finding. Go to the project page to run a code health check, or email codeguard-3@polsia.app to discuss monitoring or a managed service.

Frequently asked questions

Ready to get started?