Files
store-scraper-bot/plans/todo.md
T
tiennm99 49726f14c1 chore: backlog cleanup — deps, CI, bot description, ops docs
- pin form-data/qs/tough-cookie via package.json overrides; clears 3 of 4
  Dependabot alerts (request SSRF risk-accepted, no upstream fix)
- add GitHub Actions CI (lint + syntax check) on push/PR
- add /settings and /setdayswarning to setMyCommands
- new npm run describe sets bot profile description via Bot API
- README: drop stale preview warning, add Operations section
2026-05-10 00:13:09 +07:00

757 B

Outstanding Work

Bot live on Vercel + Upstash. Java bot retired.

Backlog

  • Tests (no framework chosen yet — needs its own multi-phase plan)

Done (see git history)

  • Triage Dependabot alerts — overrides pinned in package.json; request SSRF risk-accepted (260510-0001)
  • CI workflow — .github/workflows/ci.yml (lint + syntax check) (260510-0001)
  • Telegram bot description — npm run describe (260510-0001)
  • Operations docs — README "Operations" section covers rotation + dashboards (260510-0001)

Dropped (YAGNI)

  • Observability dashboard — Vercel + Upstash dashboards already cover function logs, cron history, Redis metrics. Revisit only when a real ops question can't be answered by the built-ins.