HighFile-scopeJavaScript / TypeScript Plug & play

Validate environment/config at startup

At process start, validate required configuration keys and fail fast with a clear message if any are missing or malformed.

Why this matters

Catches misconfiguration early and standardizes configuration contracts.

Side-by-side examples engineers can pattern-match during review.

Avoid

const apiKey = process.env.API_KEY; // may be undefined

Prefer

const REQUIRED = ['API_KEY','API_URL']; for (const k of REQUIRED) if(!process.env[k]) throw new Error(`Missing ${k}`);

Bad

process.env.API_KEY // unchecked

Good

if(!process.env.API_KEY) throw new Error('Missing API_KEY')

From the same buckets as this rule.

High
Add explicit environment variable checks
Validate required runtime env vars at container start via an entrypoint script; exit with a clear message on missing values.
config-environmentcontainer-docker-hygiene+1
High
Encrypt PII at rest using application-layer crypto
Encrypt sensitive columns (e.g., email, phone) with managed keys; ensure DB connection enforces TLS. Store only ciphertext; compare via deterministic token/hashes when needed. (GDPR Art. 32)
compliance-gdprsecurity-hardening+1
High
Enforce retention with explicit TTL per data category
PII tables must include an expires_at (or retention_policy) column and a scheduled deletion/archival job aligned to data category. No indefinite retention. (GDPR Art. 5(1)(e))
compliance-gdprprivacy-pii+2