Add user-drawn bounding box annotations, collections, and review workflow #17

	name: Dependency Vulnerability Scan

	on:
	push:
	branches: ["main"]
	pull_request:
	branches: ["main"]
	schedule:
	# Run weekly on Monday at 06:00 UTC
	- cron: "0 6 * * 1"

	permissions:
	contents: read

	jobs:
	python-audit:
	name: Python dependency audit
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v4

	- name: Set up Python
	uses: actions/setup-python@v4
	with:
	python-version: "3.11"

	- name: Install uv
	uses: astral-sh/setup-uv@v5

	- name: Install Python dependencies
	run: uv sync --frozen

	- name: Install pip-audit
	run: uv pip install pip-audit

	- name: Run pip-audit
	continue-on-error: true
	run: uv run pip-audit --strict --desc

	node-audit:
	name: Node dependency audit
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v4

	- name: Set up Node.js
	uses: actions/setup-node@v5
	with:
	node-version: "22"
	cache: "npm"
	cache-dependency-path: frontend/package-lock.json

	- name: Install dependencies
	run: \|
	cd frontend
	npm ci --legacy-peer-deps

	- name: Run npm audit
	continue-on-error: true
	run: \|
	cd frontend
	npm audit --audit-level=high

Provide feedback