Initialize GovOPlaN meta repository

tools/checks/check-dependency-audits.sh

@@ -0,0 +1,40 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+META_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+ROOT="${GOVOPLAN_CORE_ROOT:-$META_ROOT/../govoplan-core}"
+ROOT="$(cd "$ROOT" && pwd)"
+VENV_ROOT="${GOVOPLAN_VENV_ROOT:-$META_ROOT/.venv}"
+PYTHON="${PYTHON:-$VENV_ROOT/bin/python}"
+NPM="${NPM:-/home/zemion/.nvm/versions/node/v22.22.3/bin/npm}"
+NODE_BIN="$(dirname "$NPM")"
+
+if [[ ! -x "$PYTHON" ]]; then
+  PYTHON=python
+fi
+if [[ ! -x "$NPM" ]]; then
+  NPM=npm
+  NODE_BIN="$(dirname "$(command -v "$NPM")")"
+fi
+
+cd "$ROOT"
+CHECK_TESTCLIENT_DEPRECATIONS=auto bash "$META_ROOT/tools/checks/check-dependency-hygiene.sh"
+
+if ! "$PYTHON" -m pip_audit --version >/dev/null 2>&1; then
+  echo "pip-audit is not installed. Install dev requirements first:" >&2
+  echo "  $PYTHON -m pip install -r $META_ROOT/requirements-dev.txt" >&2
+  exit 127
+fi
+
+python_status=0
+npm_status=0
+
+"$PYTHON" -m pip_audit --progress-spinner off || python_status=$?
+
+cd "$ROOT/webui"
+PATH="$ROOT/webui/node_modules/.bin:$NODE_BIN:$PATH" "$NPM" audit --omit=dev || npm_status=$?
+
+if [[ "$python_status" -ne 0 || "$npm_status" -ne 0 ]]; then
+  echo "Dependency audit failed: python=$python_status npm=$npm_status" >&2
+  exit 1
+fi