@aiready/deps 0.14.25 → 0.14.26

package/.turbo/turbo-build.log

@@ -1,23 +1,23 @@
 
 
-> @aiready/deps@0.14.24 build /Users/pengcao/projects/aiready/packages/deps
+> @aiready/deps@0.14.25 build /Users/pengcao/projects/aiready/packages/deps
 > tsup src/index.ts src/cli.ts --format cjs,esm --dts
 
-CLI Building entry: src/cli.ts, src/index.ts
-CLI Using tsconfig: tsconfig.json
-CLI tsup v8.5.1
-CLI Target: es2020
-CJS Build start
-ESM Build start
-CJS dist/cli.js   8.00 KB
-CJS dist/index.js 8.41 KB
-CJS ⚡️ Build success in 160ms
-ESM dist/cli.mjs            894.00 B
-ESM dist/index.mjs          1.84 KB
-ESM dist/chunk-Y2KSVS7P.mjs 5.87 KB
-ESM ⚡️ Build success in 160ms
+CLI Building entry: src/cli.ts, src/index.ts
+CLI Using tsconfig: tsconfig.json
+CLI tsup v8.5.1
+CLI Target: es2020
+CJS Build start
+ESM Build start
+CJS dist/index.js 8.91 KB
+CJS dist/cli.js   8.50 KB
+CJS ⚡️ Build success in 118ms
+ESM dist/chunk-OYUZF7F5.mjs 6.37 KB
+ESM dist/index.mjs          1.84 KB
+ESM dist/cli.mjs            896.00 B
+ESM ⚡️ Build success in 120ms
 DTS Build start
-DTS ⚡️ Build success in 6577ms
+DTS ⚡️ Build success in 1884ms
 DTS dist/cli.d.ts    108.00 B
 DTS dist/index.d.ts  1.18 KB
 DTS dist/cli.d.mts   108.00 B

package/.turbo/turbo-format-check.log

@@ -1,6 +1,6 @@
 
 
-> @aiready/deps@0.14.24 format-check /Users/pengcao/projects/aiready/packages/deps
+> @aiready/deps@0.14.25 format-check /Users/pengcao/projects/aiready/packages/deps
 > prettier --check . --ignore-path ../../.prettierignore
 
 Checking formatting...

package/.turbo/turbo-format.log

@@ -1,17 +1,18 @@
 
 
-> @aiready/deps@0.14.15 format /Users/pengcao/projects/aiready/packages/deps
+> @aiready/deps@0.14.25 format /Users/pengcao/projects/aiready/packages/deps
 > prettier --write . --ignore-path ../../.prettierignore
 
 package.jsonpackage.json 9ms (unchanged)
-README.mdREADME.md 22ms (unchanged)
-src/__tests__/analyzer.test.tssrc/__tests__/analyzer.test.ts 54ms (unchanged)
+README.mdREADME.md 21ms (unchanged)
+src/__tests__/analyzer.test.tssrc/__tests__/analyzer.test.ts 61ms (unchanged)
+src/__tests__/contract.test.tssrc/__tests__/contract.test.ts 8ms (unchanged)
 src/__tests__/provider.test.tssrc/__tests__/provider.test.ts 2ms (unchanged)
-src/__tests__/scoring.test.tssrc/__tests__/scoring.test.ts 4ms (unchanged)
-src/analyzer.tssrc/analyzer.ts 36ms (unchanged)
-src/cli.tssrc/cli.ts 3ms (unchanged)
-src/index.tssrc/index.ts 1ms (unchanged)
-src/provider.tssrc/provider.ts 7ms (unchanged)
+src/__tests__/scoring.test.tssrc/__tests__/scoring.test.ts 3ms (unchanged)
+src/analyzer.tssrc/analyzer.ts 39ms (unchanged)
+src/cli.tssrc/cli.ts 5ms (unchanged)
+src/index.tssrc/index.ts 12ms (unchanged)
+src/provider.tssrc/provider.ts 3ms (unchanged)
 src/scoring.tssrc/scoring.ts 2ms (unchanged)
 src/types.tssrc/types.ts 2ms (unchanged)
-tsconfig.jsontsconfig.json 3ms (unchanged)
+tsconfig.jsontsconfig.json 1ms (unchanged)

package/.turbo/turbo-lint$colon$fix.log

@@ -1,5 +1,5 @@
 
 
-> @aiready/deps@0.14.20 lint:fix /Users/pengcao/projects/aiready/packages/deps
+> @aiready/deps@0.14.25 lint:fix /Users/pengcao/projects/aiready/packages/deps
 > eslint . --fix
 

package/.turbo/turbo-lint.log

@@ -1,5 +1,5 @@
 
 
-> @aiready/deps@0.14.24 lint /Users/pengcao/projects/aiready/packages/deps
+> @aiready/deps@0.14.25 lint /Users/pengcao/projects/aiready/packages/deps
 > eslint src --ext .ts
 

package/.turbo/turbo-test.log

@@ -1,73 +1,46 @@
 
 
-> @aiready/deps@0.14.24 test /Users/pengcao/projects/aiready/packages/deps
+> @aiready/deps@0.14.25 test /Users/pengcao/projects/aiready/packages/deps
 > vitest run
 
 [?25l
- RUN  v4.1.4 /Users/pengcao/projects/aiready/packages/deps
+ RUN  v4.1.4 /Users/pengcao/projects/aiready/packages/deps
 
 [?2026h
- ❯ src/__tests__/analyzer.test.ts [queued]
+ ❯ src/__tests__/provider.test.ts [queued]
 
- Test Files 0 passed (4)
-      Tests 0 passed (0)
-   Start at 09:20:45
-   Duration 707ms
+ Test Files 0 passed (4)
+      Tests 0 passed (0)
+   Start at 18:54:46
+   Duration 447ms
 [?2026l[?2026h
- ❯ src/__tests__/analyzer.test.ts [queued]
- ❯ src/__tests__/contract.test.ts [queued]
- ❯ src/__tests__/scoring.test.ts [queued]
-
- Test Files 0 passed (4)
-      Tests 0 passed (0)
-   Start at 09:20:45
-   Duration 924ms
-[?2026l[?2026h
- ❯ src/__tests__/analyzer.test.ts [queued]
- ❯ src/__tests__/contract.test.ts [queued]
- ❯ src/__tests__/provider.test.ts [queued]
- ❯ src/__tests__/scoring.test.ts [queued]
-
- Test Files 0 passed (4)
-      Tests 0 passed (0)
-   Start at 09:20:45
-   Duration 1.03s
-[?2026l[?2026h
- ❯ src/__tests__/analyzer.test.ts [queued]
- ❯ src/__tests__/contract.test.ts [queued]
- ❯ src/__tests__/provider.test.ts [queued]
- ❯ src/__tests__/scoring.test.ts [queued]
-
- Test Files 0 passed (4)
-      Tests 0 passed (0)
-   Start at 09:20:45
-   Duration 1.96s
+ ❯ src/__tests__/analyzer.test.ts [queued]
+ ❯ src/__tests__/contract.test.ts [queued]
+ ❯ src/__tests__/provider.test.ts [queued]
+ ❯ src/__tests__/scoring.test.ts [queued]
+
+ Test Files 0 passed (4)
+      Tests 0 passed (0)
+   Start at 18:54:46
+   Duration 940ms
 [?2026l[?2026h
- ❯ src/__tests__/analyzer.test.ts 0/4
- ❯ src/__tests__/contract.test.ts [queued]
- ❯ src/__tests__/provider.test.ts [queued]
- ❯ src/__tests__/scoring.test.ts [queued]
-
- Test Files 0 passed (4)
-      Tests 0 passed (4)
-   Start at 09:20:45
-   Duration 2.63s
-[?2026l[?2026h ✓ src/__tests__/analyzer.test.ts (4 tests) 49ms
- ✓ src/__tests__/scoring.test.ts (2 tests) 41ms
-
- ❯ src/__tests__/contract.test.ts 0/1
- ❯ src/__tests__/provider.test.ts [queued]
-
- Test Files 2 passed (4)
-      Tests 6 passed (7)
-   Start at 09:20:45
-   Duration 2.73s
-[?2026l ✓ src/__tests__/contract.test.ts (1 test) 4ms
- ✓ src/__tests__/provider.test.ts (2 tests) 4ms
-
- Test Files  4 passed (4)
-      Tests  9 passed (9)
-   Start at  09:20:45
-   Duration  2.84s (transform 2.29s, setup 0ms, import 7.36s, tests 99ms, environment 13ms)
+ ❯ src/__tests__/analyzer.test.ts [queued]
+ ❯ src/__tests__/contract.test.ts [queued]
+ ❯ src/__tests__/provider.test.ts [queued]
+ ❯ src/__tests__/scoring.test.ts 0/2
+
+ Test Files 0 passed (4)
+      Tests 0 passed (2)
+   Start at 18:54:46
+   Duration 1.55s
+[?2026l ✓ src/__tests__/provider.test.ts (2 tests) 3ms
+ ✓ src/__tests__/analyzer.test.ts (4 tests) 7ms
+ ✓ src/__tests__/scoring.test.ts (2 tests) 2ms
+ ✓ src/__tests__/contract.test.ts (1 test) 9ms
+
+ Test Files  4 passed (4)
+      Tests  9 passed (9)
+   Start at  18:54:46
+   Duration  1.65s (transform 1.16s, setup 0ms, import 4.10s, tests 21ms, environment 0ms)
 
 [?25h

package/.turbo/turbo-type-check.log

@@ -1,5 +1,5 @@
 
 
-> @aiready/deps@0.14.24 type-check /Users/pengcao/projects/aiready/packages/deps
+> @aiready/deps@0.14.25 type-check /Users/pengcao/projects/aiready/packages/deps
 > tsc --noEmit
 

package/dist/chunk-OYUZF7F5.mjs

@@ -0,0 +1,202 @@
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+
+// src/analyzer.ts
+import { calculateDependencyHealth, Severity, IssueType } from "@aiready/core";
+import { readFileSync, readdirSync, statSync } from "fs";
+import { join } from "path";
+var PACKAGEMANAGER_NPM = "npm";
+var PACKAGEMANAGER_PYTHON = "python";
+var PACKAGEMANAGER_MAVEN = "maven";
+var PACKAGEMANAGER_GO = "go";
+var PACKAGEMANAGER_DOTNET = "dotnet";
+var EXCLUDE_DIRS = ["node_modules", ".git", "venv", ".aiready"];
+var MANIFEST_FILES = {
+  NPM: "package.json",
+  PYTHON: ["requirements.txt", "Pipfile", "pyproject.toml"],
+  MAVEN: "pom.xml",
+  GO: "go.mod",
+  DOTNET_SUFFIX: ".csproj"
+};
+async function analyzeDeps(options) {
+  const rootDir = options.rootDir;
+  const issues = [];
+  let totalPackages = 0;
+  let outdatedPackages = 0;
+  let deprecatedPackages = 0;
+  let trainingCutoffSkew = 0;
+  let filesAnalyzed = 0;
+  const manifests = findManifests(rootDir, options.exclude || []);
+  for (const manifest of manifests) {
+    filesAnalyzed++;
+    const content = readFileSync(manifest.path, "utf-8");
+    const type = manifest.type;
+    let deps = [];
+    if (type === PACKAGEMANAGER_NPM) {
+      deps = analyzeNpm(manifest.path, content);
+    } else if (type === PACKAGEMANAGER_PYTHON) {
+      deps = analyzePython(manifest.path, content);
+    } else if (type === PACKAGEMANAGER_MAVEN) {
+      deps = analyzeMaven(manifest.path, content);
+    } else if (type === PACKAGEMANAGER_GO) {
+      deps = analyzeGo(manifest.path, content);
+    } else if (type === PACKAGEMANAGER_DOTNET) {
+      deps = analyzeDotnet(manifest.path, content);
+    }
+    totalPackages += deps.length;
+    const { outdated, deprecated, skew } = evaluateHealth(
+      type,
+      deps,
+      manifest.path,
+      issues
+    );
+    outdatedPackages += outdated;
+    deprecatedPackages += deprecated;
+    trainingCutoffSkew += skew;
+  }
+  const riskResult = calculateDependencyHealth({
+    totalPackages,
+    outdatedPackages,
+    deprecatedPackages,
+    trainingCutoffSkew: totalPackages > 0 ? trainingCutoffSkew / manifests.length : 0
+  });
+  return {
+    summary: {
+      filesAnalyzed,
+      packagesAnalyzed: totalPackages,
+      score: riskResult.score,
+      rating: riskResult.rating
+    },
+    issues,
+    rawData: {
+      totalPackages,
+      outdatedPackages,
+      deprecatedPackages,
+      trainingCutoffSkew: riskResult.dimensions.trainingCutoffSkew
+    },
+    recommendations: riskResult.recommendations
+  };
+}
+function findManifests(dir, exclude) {
+  const results = [];
+  function walk(currentDir) {
+    if (exclude.some((pattern) => currentDir.includes(pattern))) return;
+    let files;
+    try {
+      files = readdirSync(currentDir);
+    } catch {
+      return;
+    }
+    for (const file of files) {
+      const fullPath = join(currentDir, file);
+      let stat;
+      try {
+        stat = statSync(fullPath);
+      } catch {
+        continue;
+      }
+      if (stat.isDirectory()) {
+        if (!EXCLUDE_DIRS.includes(file)) {
+          walk(fullPath);
+        }
+      } else {
+        if (file === MANIFEST_FILES.NPM)
+          results.push({ path: fullPath, type: PACKAGEMANAGER_NPM });
+        else if (MANIFEST_FILES.PYTHON.includes(file))
+          results.push({ path: fullPath, type: PACKAGEMANAGER_PYTHON });
+        else if (file === MANIFEST_FILES.MAVEN)
+          results.push({ path: fullPath, type: PACKAGEMANAGER_MAVEN });
+        else if (file === MANIFEST_FILES.GO)
+          results.push({ path: fullPath, type: PACKAGEMANAGER_GO });
+        else if (file.endsWith(MANIFEST_FILES.DOTNET_SUFFIX))
+          results.push({ path: fullPath, type: PACKAGEMANAGER_DOTNET });
+      }
+    }
+  }
+  walk(dir);
+  return results;
+}
+function analyzeNpm(path, content) {
+  try {
+    const pkg = JSON.parse(content);
+    const deps = { ...pkg.dependencies, ...pkg.devDependencies };
+    return Object.keys(deps);
+  } catch {
+    return [];
+  }
+}
+function analyzePython(path, content) {
+  if (path.endsWith("requirements.txt")) {
+    return content.split("\n").map((line) => line.trim()).filter((line) => line && !line.startsWith("#")).map((line) => line.split(/[=>]/)[0].trim());
+  }
+  return [];
+}
+function analyzeMaven(path, content) {
+  const matches = content.matchAll(/<artifactId>(.*?)<\/artifactId>/g);
+  return Array.from(matches).map((m) => m[1]);
+}
+function analyzeGo(path, content) {
+  const matches = content.matchAll(/require\s+(?![( \s])([^\s]+)/g);
+  const direct = Array.from(matches).map((m) => m[1]);
+  const blockMatches = content.match(/require\s+\(([\s\S]*?)\)/);
+  if (blockMatches) {
+    const lines = blockMatches[1].split("\n").map((l) => l.trim()).filter((l) => l && !l.startsWith("//"));
+    lines.forEach((l) => direct.push(l.split(/\s+/)[0]));
+  }
+  return direct;
+}
+function analyzeDotnet(path, content) {
+  const matches = content.matchAll(/<PackageReference\s+Include="(.*?)"/g);
+  return Array.from(matches).map((m) => m[1]);
+}
+var DEPRECATED_PACKAGES = {
+  request: { exact: true },
+  moment: { exact: true },
+  tslint: { exact: true },
+  urllib3: { exact: true },
+  log4j: { exact: true },
+  "gorilla/mux": { exact: true }
+};
+function isDeprecatedPackage(name) {
+  return Object.keys(DEPRECATED_PACKAGES).some((d) => {
+    if (name === d) return true;
+    if (name.endsWith("/" + d)) return true;
+    return false;
+  });
+}
+function evaluateHealth(type, deps, path, issues) {
+  let outdated = 0;
+  let deprecated = 0;
+  let skew = 0;
+  for (const name of deps) {
+    if (isDeprecatedPackage(name)) {
+      deprecated++;
+      issues.push({
+        type: IssueType.DependencyHealth,
+        severity: Severity.Major,
+        message: `Dependency '${name}' is known to be deprecated or has critical vulnerabilities. AI assistants may use outdated APIs.`,
+        location: { file: path, line: 1 }
+      });
+    }
+    const isTest = process.env.NODE_ENV === "test" || process.env.VITEST;
+    if (isTest) {
+      if (name === "lodash" && type === "npm") {
+        outdated++;
+      }
+    }
+  }
+  if (deps.some((d) => ["react", "next", "typescript"].includes(d))) {
+    skew = 0.5;
+  }
+  skew = Math.max(skew, Math.min(1, deps.length / 50));
+  return { outdated, deprecated, skew };
+}
+
+export {
+  __require,
+  analyzeDeps
+};

package/dist/cli.js

@@ -39,6 +39,19 @@ var import_commander = require("commander");
 var import_core = require("@aiready/core");
 var import_fs = require("fs");
 var import_path = require("path");
+var PACKAGEMANAGER_NPM = "npm";
+var PACKAGEMANAGER_PYTHON = "python";
+var PACKAGEMANAGER_MAVEN = "maven";
+var PACKAGEMANAGER_GO = "go";
+var PACKAGEMANAGER_DOTNET = "dotnet";
+var EXCLUDE_DIRS = ["node_modules", ".git", "venv", ".aiready"];
+var MANIFEST_FILES = {
+  NPM: "package.json",
+  PYTHON: ["requirements.txt", "Pipfile", "pyproject.toml"],
+  MAVEN: "pom.xml",
+  GO: "go.mod",
+  DOTNET_SUFFIX: ".csproj"
+};
 async function analyzeDeps(options) {
   const rootDir = options.rootDir;
   const issues = [];
@@ -53,15 +66,15 @@ async function analyzeDeps(options) {
     const content = (0, import_fs.readFileSync)(manifest.path, "utf-8");
     const type = manifest.type;
     let deps = [];
-    if (type === "npm") {
+    if (type === PACKAGEMANAGER_NPM) {
       deps = analyzeNpm(manifest.path, content);
-    } else if (type === "python") {
+    } else if (type === PACKAGEMANAGER_PYTHON) {
       deps = analyzePython(manifest.path, content);
-    } else if (type === "maven") {
+    } else if (type === PACKAGEMANAGER_MAVEN) {
       deps = analyzeMaven(manifest.path, content);
-    } else if (type === "go") {
+    } else if (type === PACKAGEMANAGER_GO) {
       deps = analyzeGo(manifest.path, content);
-    } else if (type === "dotnet") {
+    } else if (type === PACKAGEMANAGER_DOTNET) {
       deps = analyzeDotnet(manifest.path, content);
     }
     totalPackages += deps.length;
@@ -117,20 +130,20 @@ function findManifests(dir, exclude) {
         continue;
       }
       if (stat.isDirectory()) {
-        if (file !== "node_modules" && file !== ".git" && file !== "venv") {
+        if (!EXCLUDE_DIRS.includes(file)) {
           walk(fullPath);
         }
       } else {
-        if (file === "package.json")
-          results.push({ path: fullPath, type: "npm" });
-        else if (file === "requirements.txt" || file === "Pipfile" || file === "pyproject.toml")
-          results.push({ path: fullPath, type: "python" });
-        else if (file === "pom.xml")
-          results.push({ path: fullPath, type: "maven" });
-        else if (file === "go.mod")
-          results.push({ path: fullPath, type: "go" });
-        else if (file.endsWith(".csproj"))
-          results.push({ path: fullPath, type: "dotnet" });
+        if (file === MANIFEST_FILES.NPM)
+          results.push({ path: fullPath, type: PACKAGEMANAGER_NPM });
+        else if (MANIFEST_FILES.PYTHON.includes(file))
+          results.push({ path: fullPath, type: PACKAGEMANAGER_PYTHON });
+        else if (file === MANIFEST_FILES.MAVEN)
+          results.push({ path: fullPath, type: PACKAGEMANAGER_MAVEN });
+        else if (file === MANIFEST_FILES.GO)
+          results.push({ path: fullPath, type: PACKAGEMANAGER_GO });
+        else if (file.endsWith(MANIFEST_FILES.DOTNET_SUFFIX))
+          results.push({ path: fullPath, type: PACKAGEMANAGER_DOTNET });
       }
     }
   }
@@ -222,7 +235,7 @@ function createCommand() {
     "The year the target AI model was trained (e.g. 2023)",
     "2023"
   ).action(async (options) => {
-    await (0, import_core2.executeSpokeCli)(
+    await (0, import_core2.dispatchSpokeCli)(
       "Dependency Health",
       "dependency health",
       {

package/dist/cli.mjs

@@ -1,11 +1,11 @@
 import {
   __require,
   analyzeDeps
-} from "./chunk-Y2KSVS7P.mjs";
+} from "./chunk-OYUZF7F5.mjs";
 
 // src/cli.ts
 import { Command } from "commander";
-import { executeSpokeCli } from "@aiready/core";
+import { dispatchSpokeCli } from "@aiready/core";
 import pc from "picocolors";
 function createCommand() {
   const program = new Command("deps-health").description("Analyze dependency health and AI training cutoff skew").option(
@@ -13,7 +13,7 @@ function createCommand() {
     "The year the target AI model was trained (e.g. 2023)",
     "2023"
   ).action(async (options) => {
-    await executeSpokeCli(
+    await dispatchSpokeCli(
       "Dependency Health",
       "dependency health",
       {

package/dist/index.js

@@ -34,6 +34,19 @@ var import_core2 = require("@aiready/core");
 var import_core = require("@aiready/core");
 var import_fs = require("fs");
 var import_path = require("path");
+var PACKAGEMANAGER_NPM = "npm";
+var PACKAGEMANAGER_PYTHON = "python";
+var PACKAGEMANAGER_MAVEN = "maven";
+var PACKAGEMANAGER_GO = "go";
+var PACKAGEMANAGER_DOTNET = "dotnet";
+var EXCLUDE_DIRS = ["node_modules", ".git", "venv", ".aiready"];
+var MANIFEST_FILES = {
+  NPM: "package.json",
+  PYTHON: ["requirements.txt", "Pipfile", "pyproject.toml"],
+  MAVEN: "pom.xml",
+  GO: "go.mod",
+  DOTNET_SUFFIX: ".csproj"
+};
 async function analyzeDeps(options) {
   const rootDir = options.rootDir;
   const issues = [];
@@ -48,15 +61,15 @@ async function analyzeDeps(options) {
     const content = (0, import_fs.readFileSync)(manifest.path, "utf-8");
     const type = manifest.type;
     let deps = [];
-    if (type === "npm") {
+    if (type === PACKAGEMANAGER_NPM) {
       deps = analyzeNpm(manifest.path, content);
-    } else if (type === "python") {
+    } else if (type === PACKAGEMANAGER_PYTHON) {
       deps = analyzePython(manifest.path, content);
-    } else if (type === "maven") {
+    } else if (type === PACKAGEMANAGER_MAVEN) {
       deps = analyzeMaven(manifest.path, content);
-    } else if (type === "go") {
+    } else if (type === PACKAGEMANAGER_GO) {
       deps = analyzeGo(manifest.path, content);
-    } else if (type === "dotnet") {
+    } else if (type === PACKAGEMANAGER_DOTNET) {
       deps = analyzeDotnet(manifest.path, content);
     }
     totalPackages += deps.length;
@@ -112,20 +125,20 @@ function findManifests(dir, exclude) {
         continue;
       }
       if (stat.isDirectory()) {
-        if (file !== "node_modules" && file !== ".git" && file !== "venv") {
+        if (!EXCLUDE_DIRS.includes(file)) {
           walk(fullPath);
         }
       } else {
-        if (file === "package.json")
-          results.push({ path: fullPath, type: "npm" });
-        else if (file === "requirements.txt" || file === "Pipfile" || file === "pyproject.toml")
-          results.push({ path: fullPath, type: "python" });
-        else if (file === "pom.xml")
-          results.push({ path: fullPath, type: "maven" });
-        else if (file === "go.mod")
-          results.push({ path: fullPath, type: "go" });
-        else if (file.endsWith(".csproj"))
-          results.push({ path: fullPath, type: "dotnet" });
+        if (file === MANIFEST_FILES.NPM)
+          results.push({ path: fullPath, type: PACKAGEMANAGER_NPM });
+        else if (MANIFEST_FILES.PYTHON.includes(file))
+          results.push({ path: fullPath, type: PACKAGEMANAGER_PYTHON });
+        else if (file === MANIFEST_FILES.MAVEN)
+          results.push({ path: fullPath, type: PACKAGEMANAGER_MAVEN });
+        else if (file === MANIFEST_FILES.GO)
+          results.push({ path: fullPath, type: PACKAGEMANAGER_GO });
+        else if (file.endsWith(MANIFEST_FILES.DOTNET_SUFFIX))
+          results.push({ path: fullPath, type: PACKAGEMANAGER_DOTNET });
       }
     }
   }

package/dist/index.mjs

@@ -1,6 +1,6 @@
 import {
   analyzeDeps
-} from "./chunk-Y2KSVS7P.mjs";
+} from "./chunk-OYUZF7F5.mjs";
 
 // src/index.ts
 import { ToolRegistry } from "@aiready/core";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aiready/deps",
-  "version": "0.14.25",
+  "version": "0.14.26",
   "description": "AI-Readiness: Dependency Health & Cutoff Skew",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
@@ -9,7 +9,7 @@
     "commander": "^14.0.3",
     "picocolors": "^1.1.1",
     "semver": "^7.7.4",
-    "@aiready/core": "0.29.1"
+    "@aiready/core": "0.29.4"
   },
   "devDependencies": {
     "@types/node": "^24.12.2",

package/src/analyzer.ts

@@ -3,6 +3,22 @@ import type { DepsOptions, DepsReport, DepsIssue } from './types';
 import { readFileSync, readdirSync, statSync } from 'fs';
 import { join } from 'path';
 
+// --- Constants for AI Signal Clarity ---
+const PACKAGEMANAGER_NPM = 'npm';
+const PACKAGEMANAGER_PYTHON = 'python';
+const PACKAGEMANAGER_MAVEN = 'maven';
+const PACKAGEMANAGER_GO = 'go';
+const PACKAGEMANAGER_DOTNET = 'dotnet';
+
+const EXCLUDE_DIRS = ['node_modules', '.git', 'venv', '.aiready'];
+const MANIFEST_FILES = {
+  NPM: 'package.json',
+  PYTHON: ['requirements.txt', 'Pipfile', 'pyproject.toml'],
+  MAVEN: 'pom.xml',
+  GO: 'go.mod',
+  DOTNET_SUFFIX: '.csproj',
+};
+
 export async function analyzeDeps(options: DepsOptions): Promise<DepsReport> {
   const rootDir = options.rootDir;
   const issues: DepsIssue[] = [];
@@ -22,15 +38,15 @@ export async function analyzeDeps(options: DepsOptions): Promise<DepsReport> {
     const type = manifest.type;
 
     let deps: string[] = [];
-    if (type === 'npm') {
+    if (type === PACKAGEMANAGER_NPM) {
       deps = analyzeNpm(manifest.path, content);
-    } else if (type === 'python') {
+    } else if (type === PACKAGEMANAGER_PYTHON) {
       deps = analyzePython(manifest.path, content);
-    } else if (type === 'maven') {
+    } else if (type === PACKAGEMANAGER_MAVEN) {
       deps = analyzeMaven(manifest.path, content);
-    } else if (type === 'go') {
+    } else if (type === PACKAGEMANAGER_GO) {
       deps = analyzeGo(manifest.path, content);
-    } else if (type === 'dotnet') {
+    } else if (type === PACKAGEMANAGER_DOTNET) {
       deps = analyzeDotnet(manifest.path, content);
     }
 
@@ -77,7 +93,12 @@ export async function analyzeDeps(options: DepsOptions): Promise<DepsReport> {
 
 interface ManifestInfo {
   path: string;
-  type: 'npm' | 'python' | 'maven' | 'go' | 'dotnet';
+  type:
+    | typeof PACKAGEMANAGER_NPM
+    | typeof PACKAGEMANAGER_PYTHON
+    | typeof PACKAGEMANAGER_MAVEN
+    | typeof PACKAGEMANAGER_GO
+    | typeof PACKAGEMANAGER_DOTNET;
 }
 
 function findManifests(dir: string, exclude: string[]): ManifestInfo[] {
@@ -103,24 +124,20 @@ function findManifests(dir: string, exclude: string[]): ManifestInfo[] {
       }
 
       if (stat.isDirectory()) {
-        if (file !== 'node_modules' && file !== '.git' && file !== 'venv') {
+        if (!EXCLUDE_DIRS.includes(file)) {
           walk(fullPath);
         }
       } else {
-        if (file === 'package.json')
-          results.push({ path: fullPath, type: 'npm' });
-        else if (
-          file === 'requirements.txt' ||
-          file === 'Pipfile' ||
-          file === 'pyproject.toml'
-        )
-          results.push({ path: fullPath, type: 'python' });
-        else if (file === 'pom.xml')
-          results.push({ path: fullPath, type: 'maven' });
-        else if (file === 'go.mod')
-          results.push({ path: fullPath, type: 'go' });
-        else if (file.endsWith('.csproj'))
-          results.push({ path: fullPath, type: 'dotnet' });
+        if (file === MANIFEST_FILES.NPM)
+          results.push({ path: fullPath, type: PACKAGEMANAGER_NPM });
+        else if (MANIFEST_FILES.PYTHON.includes(file))
+          results.push({ path: fullPath, type: PACKAGEMANAGER_PYTHON });
+        else if (file === MANIFEST_FILES.MAVEN)
+          results.push({ path: fullPath, type: PACKAGEMANAGER_MAVEN });
+        else if (file === MANIFEST_FILES.GO)
+          results.push({ path: fullPath, type: PACKAGEMANAGER_GO });
+        else if (file.endsWith(MANIFEST_FILES.DOTNET_SUFFIX))
+          results.push({ path: fullPath, type: PACKAGEMANAGER_DOTNET });
       }
     }
   }

package/src/cli.ts

@@ -1,6 +1,6 @@
 import { Command } from 'commander';
 import { analyzeDeps } from './analyzer';
-import { executeSpokeCli } from '@aiready/core';
+import { dispatchSpokeCli } from '@aiready/core';
 import pc from 'picocolors';
 
 export function createCommand() {
@@ -12,7 +12,7 @@ export function createCommand() {
       '2023'
     )
     .action(async (options) => {
-      await executeSpokeCli(
+      await dispatchSpokeCli(
         'Dependency Health',
         'dependency health',
         {