diff --git a/README.md b/README.md
index 2d25cbb..1068271 100644
--- a/README.md
+++ b/README.md
@@ -1,8 +1,9 @@
 # @pleaseai/cli-toolkit
 
 [![npm version](https://badge.fury.io/js/@pleaseai%2Fcli-toolkit.svg)](https://badge.fury.io/js/@pleaseai%2Fcli-toolkit)
-[![CI](https://github.com/pleaseai/gh-please/actions/workflows/ci.yml/badge.svg)](https://github.com/pleaseai/cli-toolkit/actions/workflows/ci.yml)
+[![CI](https://github.com/pleaseai/cli-toolkit/actions/workflows/ci.yml/badge.svg)](https://github.com/pleaseai/cli-toolkit/actions/workflows/ci.yml)
 [![codecov](https://codecov.io/gh/pleaseai/cli-toolkit/graph/badge.svg?token=lAPii2Uj1a)](https://codecov.io/gh/pleaseai/cli-toolkit)
+[![Socket Badge](https://socket.dev/api/badge/npm/package/@pleaseai/cli-toolkit)](https://socket.dev/npm/package/@pleaseai/cli-toolkit)
 [![code style](https://antfu.me/badge-code-style.svg)](https://github.com/antfu/eslint-config)
 
 Shared CLI utilities for LLM-focused command-line tools.
diff --git a/codecov.yml b/codecov.yml
new file mode 100644
index 0000000..7afc8d0
--- /dev/null
+++ b/codecov.yml
@@ -0,0 +1,26 @@
+# Codecov configuration
+# Docs: https://docs.codecov.com/docs/codecov-yaml
+coverage:
+  status:
+    project:
+      default:
+        # Compare against the base commit; allow a small dip to avoid flaky failures.
+        target: auto
+        threshold: 1%
+    patch:
+      default:
+        # New/changed lines in a PR should be well covered.
+        target: 80%
+        threshold: 0%
+
+comment:
+  layout: 'reach, diff, flags, files'
+  behavior: default
+  require_changes: false
+
+# Source-only coverage: tests, build output, and type-only files add noise.
+ignore:
+  - test
+  - dist
+  - '**/*.test.ts'
+  - '**/*.d.ts'