mirror of
https://github.com/tiennm99/store-scraper-bot.git
synced 2026-10-20 02:18:18 +00:00
- pin form-data/qs/tough-cookie via package.json overrides; clears 3 of 4 Dependabot alerts (request SSRF risk-accepted, no upstream fix) - add GitHub Actions CI (lint + syntax check) on push/PR - add /settings and /setdayswarning to setMyCommands - new npm run describe sets bot profile description via Bot API - README: drop stale preview warning, add Operations section
757 B
757 B
Outstanding Work
Bot live on Vercel + Upstash. Java bot retired.
Backlog
- Tests (no framework chosen yet — needs its own multi-phase plan)
Done (see git history)
Triage Dependabot alerts— overrides pinned inpackage.json;requestSSRF risk-accepted (260510-0001)CI workflow—.github/workflows/ci.yml(lint + syntax check) (260510-0001)Telegram bot description—npm run describe(260510-0001)Operations docs— README "Operations" section covers rotation + dashboards (260510-0001)
Dropped (YAGNI)
- Observability dashboard — Vercel + Upstash dashboards already cover function logs, cron history, Redis metrics. Revisit only when a real ops question can't be answered by the built-ins.