getreadystack/cra-24-72-14-reporting-lint repository overview

⁠CRA 24/72/14 Reporting Lint (Article 14)

Reads your SECURITY.md against the EU Cyber Resilience Act reporting clock that started on 11 September 2026 — 24 hours, 72 hours, 14 days, to ENISA and your coordinating CSIRT.

⁠Run

docker run --rm -v "$PWD":/work getreadystack/cra-24-72-14-reporting-lint /work/file.md

The same 18 rules as the VS Code extension, in a container. Mount a folder on /work.

⁠Free

• Checks the Markdown file you have open against all 18 rules, offline, with the article and the replacement line for every finding — no watermark, no counter, nothing withheld.
• --rules lists every rule

⁠With a licence ($29 once)

• Sweeps every Markdown file in the workspace in one pass, works out which checks are answered nowhere in the repository rather than merely missing from one file, and writes one dated CRA-24-72-14-READINESS.md to hand to an auditor.

docker run --rm -e READYSTACK_LICENSE=<key> -v "$PWD":/work getreadystack/cra-24-72-14-reporting-lint --dir /work --ci

One hour of EU product-compliance consulting runs $150-250, and a first documentation review is rarely one hour.

⁠Use from an AI agent (MCP)

Claude Code · Cursor · Windsurf · any MCP client - add to your MCP config:

{ "mcpServers": { "cra-24-72-14-reporting-lint": { "command": "npx", "args": ["-y", "@readystack/cra-24-72-14-reporting-lint", "--mcp"] } } }

Tools: check_text and check_file (free) · check_dir (licence; the full sweep is free for 7 days). The agent gets every finding with the line number.

⁠Use in CI

- name: CRA 24/72/14 Reporting Lint (Article 14)
  run: npx -y @readystack/cra-24-72-14-reporting-lint --dir . --ci

(container: docker run --rm -v "$PWD:/work" getreadystack/cra-24-72-14-reporting-lint --dir /work --ci)

Try the full run free for 7 days — no key needed. Then one licence, 7-day refund, no questions. Set READYSTACK_LICENSE=<key> or run --license <key> once.

Get a licence⁠