Struct AuditFixer 

pub struct AuditFixer { /* private fields */ }

Security advisory fixer — runs cargo audit --json and parses each advisory into a Diagnostic so the heal loop can treat security findings the same way it treats compile errors and clippy warnings.

This is part of the “compile-as-auditor” amplification (#38): we widen the heal loop’s input from cargo check + clippy + test to also include dependency vulnerabilities, treating the toolchain as a unified code auditor rather than just a build pipeline.

cargo audit is a separate binary and not always installed. If it’s missing or fails to run, this fixer returns an empty Vec rather than erroring — security checks are advisory, not blocking.

Implementations

impl AuditFixer

pub fn new(workspace_root: PathBuf) -> Self

Create a new AuditFixer

pub async fn check(&self) -> Result<Vec<Diagnostic>>

Run cargo audit --json and convert each vulnerability into a Diagnostic.

pub fn parse_audit_json(json_text: &str) -> Vec<Diagnostic>

Parse cargo audit --json output into Diagnostic entries. Pure function — extracted so it can be unit-tested without invoking the binary.