@datapos/datapos-shared 0.3.275 → 0.3.282

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/README.md +36 -5
  2. package/package.json +31 -23
  3. package/schemas/index.d.ts +0 -1
  4. package/schemas/index.js +0 -1
package/README.md CHANGED
@@ -1,5 +1,6 @@
1
1
  # Data Positioning Shared Library
2
2
 
3
+ <span><!-- OWASP_BADGES_START -->[![OWASP](https://img.shields.io/badge/OWASP-passed-4CAF50)](https://data-positioning.github.io/datapos-shared/dependency-check-reports/dependency-check-report.html)<!-- OWASP_BADGES_END --></span>
3
4
  [![npm version](https://img.shields.io/npm/v/@datapos/datapos-shared.svg)](https://www.npmjs.com/package/@datapos/datapos-shared)
4
5
  [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](./LICENSE)
5
6
 
@@ -40,11 +41,11 @@ The Data Positioning solution consists of the following modules. All modules, ex
40
41
  | Type | Dynamic | Notes |
41
42
  | --------- | :-----: | --------------------------------------------------------------- |
42
43
  | App | | Implements the data positioning web application. |
43
- | Engine | ✔ | Implements the data positioning engine. |
44
- | Connector | ✔ | Implements a connector which handles one or more connections. |
45
- | Context | ✔ | Implements a context which defines one or more models. |
46
- | Presenter | ✔ | Implements a presenter which renders one or more presentations. |
47
- | Tool | ✔ | Implements... |
44
+ | Engine | ✔ | Implements the data positioning engine. |
45
+ | Connector | ✔ | Implements a connector which handles one or more connections. |
46
+ | Context | ✔ | Implements a context which defines one or more models. |
47
+ | Presenter | ✔ | Implements a presenter which renders one or more presentations. |
48
+ | Tool | ✔ | Implements... |
48
49
 
49
50
  ### Components
50
51
 
@@ -111,6 +112,36 @@ let connectorConfig: ConnectorConfig;
111
112
  getComponentStatus('alpha');
112
113
  ```
113
114
 
115
+ ## Reports & Compliance
116
+
117
+ ### Dependency Check Report
118
+
119
+ The OWASP Dependency Check Report identifies known vulnerabilities in project dependencies. It is generated automatically on each release using the npm package `owasp-dependency-check`. We also rely on GitHub Dependabot to continuously check for vulnerabilities across all dependencies.
120
+
121
+ [View the OWASP Dependency Check Report](https://data-positioning.github.io/datapos-shared/dependency-check-reports/dependency-check-report.html)
122
+
123
+ ### Dependency Licenses
124
+
125
+ The following table lists top-level production and peer dependencies. All these dependencies (including transitive ones) have been recursively verified to use Apache-2.0, CC0-1.0, or MIT—commercially friendly licenses with minimal restrictions. Developers cloning this repository should independently verify dev and optional dependencies; users of the uploaded library are covered by these checks.
126
+
127
+ <!-- DEPENDENCY_LICENSES_START -->
128
+
129
+ | Name | Type | Installed | Latest | Latest Modified |
130
+ | :---------------------------- | :-----: | :-------: | :----: | :----------------------- |
131
+ | @speed-highlight/core | CC0-1.0 | 1.2.12 | 1.2.12 | 2025-11-03T17:41:39.642Z |
132
+ | micromark | MIT | 4.0.2 | 4.0.2 | 2025-02-27T14:04:03.783Z |
133
+ | micromark-extension-gfm-table | MIT | 2.1.1 | 2.1.1 | 2025-01-20T12:24:29.697Z |
134
+
135
+ <!-- DEPENDENCY_LICENSES_END -->
136
+
137
+ **Installed dependencies are kept up-to-date with latest releases.**
138
+
139
+ ### Bundle Analysis Report
140
+
141
+ The Bundle Analysis Report provides a detailed breakdown of the bundle's composition and module sizes, helping to identify which modules contribute most to the final build. It is generated automatically on each release using the npm package `rollup-plugin-visualizer`.
142
+
143
+ [View the Bundle Analysis Report](https://data-positioning.github.io/datapos-shared/stats/index.html)
144
+
114
145
  ## Repository Common Management Commands
115
146
 
116
147
  The table below lists the repository management commands available in this project.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@datapos/datapos-shared",
3
- "version": "0.3.275",
3
+ "version": "0.3.282",
4
4
  "description": "A library containing common declarations and utilities used across all other Data Positioning projects.",
5
5
  "license": "MIT",
6
6
  "private": false,
@@ -21,14 +21,13 @@
21
21
  "types": "./dist/types/index.d.ts"
22
22
  },
23
23
  "./schemas": {
24
- "import": "./schemas/index.js",
25
- "types": "./schemas/index.d.ts"
24
+ "import": "./dist/schemas.js",
25
+ "types": "./dist/types/schemas.d.ts"
26
26
  }
27
27
  },
28
28
  "sideEffects": false,
29
29
  "files": [
30
- "dist",
31
- "schemas"
30
+ "dist"
32
31
  ],
33
32
  "peerDependencies": {
34
33
  "csv-parse": "^6.1.0",
@@ -37,7 +36,7 @@
37
36
  "zod": "^4.1.13"
38
37
  },
39
38
  "devDependencies": {
40
- "@datapos/datapos-development": "^0.3.263",
39
+ "@datapos/datapos-development": "^0.3.266",
41
40
  "@types/node": "^24.10.1",
42
41
  "@types/prismjs": "^1.26.5",
43
42
  "@typescript-eslint/eslint-plugin": "^8.48.1",
@@ -56,27 +55,36 @@
56
55
  "vite-plugin-dts": "^4.5.4"
57
56
  },
58
57
  "scripts": {
59
- "audit": "npm audit",
60
- "build": "vite build",
61
- "bump:version": "node -e \"import('@datapos/datapos-development').then(m => m.bumpVersion())\"",
62
- "check": "npm outdated; npm-check-updates -i && retire",
63
- "document": "npm run _document:licenceReport && npm run _document:licenceCheck",
64
- "format": "prettier --write src/",
65
- "lint": "eslint .",
66
- "publish:toNPM": "npm publish --access public",
58
+ "audit": "node -e \"import('@datapos/datapos-development').then(m => m.auditDependencies())\"",
59
+ "build": "node -e \"import('@datapos/datapos-development').then(m => m.buildProject())\"",
60
+ "check": "node -e \"import('@datapos/datapos-development').then(m => m.checkDependencies())\"",
61
+ "document": "node -e \"import('@datapos/datapos-development').then(m => m.documentDependencies(['MIT']))\"",
62
+ "format": "node -e \"import('@datapos/datapos-development').then(m => m.formatCode())\"",
63
+ "lint": "node -e \"import('@datapos/datapos-development').then(m => m.lintCode())\"",
64
+ "release": "node -e \"import('@datapos/datapos-development').then(m => m.releaseProject())\"",
65
+ "sync": "node -e \"import('@datapos/datapos-development').then(m => m.syncProjectWithGitHub())\"",
66
+ "test": "node -e \"import('@datapos/datapos-development').then(m => m.testProject())\"",
67
+ "update": "node -e \"import('@datapos/datapos-development').then(m => m.updateDataPosDependencies(['development']))\"",
68
+ "audit1": "npm audit",
69
+ "build1": "vite build",
70
+ "bump:version1": "node -e \"import('@datapos/datapos-development').then(m => m.bumpVersion())\"",
71
+ "check1": "npm outdated; npm-check-updates -i && retire",
72
+ "document1": "npm run _document:licenceReport && npm run _document:licenceCheck",
73
+ "format1": "prettier --write src/",
74
+ "lint1": "eslint .",
75
+ "publish:toNPM1": "npm publish --access public",
67
76
  "release1": "npm run bump:version && npm run build && npm run _sync:withGitHub && npm run publish:toNPM",
68
- "release": " npm run build && npm run _sync:withGitHub && npm run publish:toNPM",
69
- "sync": "npm run bump:version && npm run _sync:withGitHub",
70
- "test": "node -e \"import('@datapos/datapos-development').then(m => m.echoScriptNotImplemented('Test'))\"",
71
- "update:dataPosDeps": "npm run _update:developDep",
72
- "_document:licenceReport": "license-report --only=prod,peer > LICENSES.json",
73
- "_document:licenceCheck": "license-report-check --source ./LICENSES.json --allowed 'MIT' --allowed 'n/a' --allowed 'Apache-2.0' --output=table",
74
- "_sync:withGitHub": "node -e \"import('@datapos/datapos-development').then(m => m.syncWithGitHub())\"",
75
- "_update:developDep": "npm install --save-dev @datapos/datapos-development@latest",
77
+ "sync1": "npm run bump:version && npm run _sync:withGitHub",
78
+ "test1": "node -e \"import('@datapos/datapos-development').then(m => m.echoScriptNotImplemented('Test'))\"",
79
+ "update:dataPosDep1s": "npm run _update:developDep",
80
+ "_document:licenceReport1": "license-report --only=prod,peer > LICENSES.json",
81
+ "_document:licenceCheck1": "license-report-check --source ./LICENSES.json --allowed 'MIT' --allowed 'n/a' --allowed 'Apache-2.0' --output=table",
82
+ "_sync:withGitHub1": "node -e \"import('@datapos/datapos-development').then(m => m.syncWithGitHub())\"",
83
+ "_update:developDep1": "npm install --save-dev @datapos/datapos-development@latest",
76
84
  "___ts-to-zod": "npx ts-to-zod src/schemaTypes.ts src/schemaZOD.ts"
77
85
  },
78
86
  "engines": {
79
87
  "node": ">=22.0.0",
80
88
  "npm": ">=11.0.0"
81
89
  }
82
- }
90
+ }
package/schemas/index.d.ts DELETED
@@ -1 +0,0 @@
1
- export * from '../dist/types/schemas';
package/schemas/index.js DELETED
@@ -1 +0,0 @@
1
- export * from '../dist/schemas.js';