opm fix
Runs the same scan as opm check, then auto-applies fixes to package.json.
What It Fixes
- Typosquats — Renames to the correct package (e.g.
lodahs → lodash)
- Vulnerable packages — Upgrades to patched versions suggested by OSV
- AI-flagged packages — Applies replacements when 2+ agents agree on a suggestion
Process
- Scans all dependencies (same as
opm check)
- Collects fixes: typosquat renames, CVE upgrades, AI-suggested replacements
- Modifies
package.json in place (preserves ^/~ prefixes)
- Optionally uploads report to Fileverse
Run npm install or opm install after opm fix to apply changes and update the lockfile.
Review the diff before committing. AI replacements require 2+ agent consensus.