@dpuse/dpuse-shared 0.3.849 → 0.3.863
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +149 -154
- package/dist/componentConfig.schema-DT3mO5rS.js.map +1 -1
- package/dist/dpuse-shared-component.es.js.map +1 -1
- package/dist/dpuse-shared-componentDataView.es.js.map +1 -1
- package/dist/dpuse-shared-componentModuleConnector.es.js +1 -1
- package/dist/dpuse-shared-componentModuleConnector.es.js.map +1 -1
- package/dist/dpuse-shared-componentRecipe.es.js +0 -4
- package/dist/dpuse-shared-encoding.es.js.map +1 -1
- package/dist/dpuse-shared-errors.es.js +1 -1
- package/dist/dpuse-shared-errors.es.js.map +1 -1
- package/dist/dpuse-shared-locale.es.js.map +1 -1
- package/dist/label-DexpXrnC.js.map +1 -1
- package/dist/types/src/component/connection/index.d.ts +5 -4
- package/dist/types/src/component/context/index.d.ts +2 -1
- package/dist/types/src/component/context/model/entity/event/index.d.ts +2 -1
- package/dist/types/src/component/context/model/entity/index.d.ts +2 -1
- package/dist/types/src/component/dataView/index.d.ts +8 -7
- package/dist/types/src/component/index.d.ts +2 -3
- package/dist/types/src/component/module/connector/index.d.ts +1 -11
- package/dist/types/src/component/module/cookbook/index.d.ts +1 -2
- package/dist/types/src/component/module/index.d.ts +1 -2
- package/dist/types/src/component/presentation/index.d.ts +0 -12
- package/dist/types/src/component/recipe/index.d.ts +1 -2
- package/dist/types/src/encoding/index.d.ts +4 -4
- package/dist/types/src/errors/index.d.ts +2 -1
- package/dist/types/src/locale/label.d.ts +2 -1
- package/package.json +9 -16
- package/dist/dpuse-shared-componentRecipe.es.js.map +0 -1
package/README.md
CHANGED
|
@@ -5,10 +5,10 @@
|
|
|
5
5
|
[](./LICENSE)
|
|
6
6
|
[](https://github.com/dpuse/dpuse-shared/releases/latest)
|
|
7
7
|
[](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml)
|
|
8
|
-
[](https://github.com/dpuse/dpuse-shared/actions/workflows/codeql.yml)
|
|
9
|
-
[](https://sonarcloud.io/summary/new_code?id=dpuse_dpuse-shared)
|
|
10
8
|
|
|
11
|
-
[
|
|
9
|
+
[DPUse](https://www.dpuse.app) · [Report a Vulnerability](https://github.com/dpuse/dpuse-shared/security/advisories/new) · [Open an Issue](https://github.com/dpuse/dpuse-shared/issues)
|
|
10
|
+
|
|
11
|
+
Common constants, types and utilities used across all DPUse projects.
|
|
12
12
|
|
|
13
13
|
## About DPUse
|
|
14
14
|
|
|
@@ -24,15 +24,23 @@ In addition, DPUse provides [Tools](https://www.dpuse.app) used by the applicati
|
|
|
24
24
|
|
|
25
25
|
## Introduction
|
|
26
26
|
|
|
27
|
-
@dpuse/dpuse-shared is the foundational library for the [DPUse](https://www.dpuse.app/) ecosystem. It provides the common constants, types, errors, and utilities that are shared across all DPUse modules — including the App, API, Engine, Connectors, Contexts, Presenters and Recipes
|
|
27
|
+
@dpuse/dpuse-shared is the foundational library for the [DPUse](https://www.dpuse.app/) ecosystem. It provides the common constants, types, errors, and utilities that are shared across all DPUse modules — including the App, API, Engine, Connectors, Contexts, Presenters and Recipes.
|
|
28
|
+
|
|
29
|
+
The library is written in TypeScript and designed to be consumed exclusively by TypeScript projects. All configuration types are schema-validated using [Valibot](https://valibot.dev/), giving consumers both compile-time safety and runtime validation from a single source of truth.
|
|
28
30
|
|
|
29
31
|
<!-- OPENING_END -->
|
|
30
32
|
|
|
31
33
|
<!-- USAGE_START -->
|
|
32
34
|
|
|
33
|
-
|
|
35
|
+
## Usage
|
|
36
|
+
|
|
37
|
+
This [package](https://www.npmjs.com/package/@dpuse/dpuse-shared) is available on [npm](https://www.npmjs.com/). Install it with:
|
|
38
|
+
|
|
39
|
+
```bash
|
|
40
|
+
npm install @dpuse/dpuse-shared
|
|
41
|
+
```
|
|
34
42
|
|
|
35
|
-
|
|
43
|
+
To work on the source instead, clone this repository.
|
|
36
44
|
|
|
37
45
|
```bash
|
|
38
46
|
git clone https://github.com/dpuse/dpuse-shared.git
|
|
@@ -42,24 +50,11 @@ npm install
|
|
|
42
50
|
|
|
43
51
|
_Requires [Node.js](https://nodejs.org/) 24 or later, [npm](https://www.npmjs.com/) 12 or later, and [TypeScript](https://www.typescriptlang.org/) 6.0.3 or later._
|
|
44
52
|
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
### OLD Installation
|
|
48
|
-
|
|
49
|
-
`@dpuse/dpuse-shared` is published to the [public npm registry](https://www.npmjs.com/package/@dpuse/dpuse-shared). Install it using your preferred package manager:
|
|
50
|
-
|
|
51
|
-
```bash
|
|
52
|
-
# npm
|
|
53
|
-
npm install @dpuse/dpuse-shared
|
|
54
|
-
|
|
55
|
-
# yarn
|
|
56
|
-
yarn add @dpuse/dpuse-shared
|
|
53
|
+
This repository is managed using the common set of actions provided by [@dpuse/dpuse-development](https://github.com/dpuse/dpuse-development). See the `scripts` block in [package.json](https://github.com/dpuse/dpuse-shared/blob/main/package.json) for details.
|
|
57
54
|
|
|
58
|
-
|
|
59
|
-
pnpm add @dpuse/dpuse-shared
|
|
60
|
-
```
|
|
55
|
+
<!-- USAGE_END -->
|
|
61
56
|
|
|
62
|
-
###
|
|
57
|
+
### Example
|
|
63
58
|
|
|
64
59
|
This package uses [sub-path exports](https://nodejs.org/api/packages.html#subpath-exports). Import only the entry points you need:
|
|
65
60
|
|
|
@@ -77,8 +72,6 @@ try {
|
|
|
77
72
|
}
|
|
78
73
|
```
|
|
79
74
|
|
|
80
|
-
Implements the common Data Positioning repository management command set. For more information see [@dpuse/dpuse-development](https://github.com/dpuse/dpuse-development).
|
|
81
|
-
|
|
82
75
|
## Architecture
|
|
83
76
|
|
|
84
77
|
### Component Hierarchy
|
|
@@ -111,41 +104,39 @@ See [API_REFERENCE.md](./API_REFERENCE.md) for the complete API reference, inclu
|
|
|
111
104
|
|
|
112
105
|
## Dependency Licenses
|
|
113
106
|
|
|
114
|
-
License data is
|
|
115
|
-
|
|
116
|
-
|Dependency|Version|License(s)|Document|
|
|
117
|
-
|
|
118
|
-
|[@borewit/text-codec](https://github.com/Borewit/text-codec)|0.2.2|MIT|[LICENSE](licenses/downloads/@borewit/text-codec@0.2.2-LICENSE.txt)|
|
|
119
|
-
|[@tokenizer/inflate](https://github.com/Borewit/tokenizer-inflate)|0.4.1|MIT|[LICENSE](licenses/downloads/@tokenizer/inflate@0.4.1-LICENSE.txt)|
|
|
120
|
-
|[@tokenizer/token](https://github.com/Borewit/tokenizer-token)|0.3.0|MIT|[LICENSE](licenses/downloads/@tokenizer/token@0.3.0-LICENSE.txt)|
|
|
121
|
-
|[debug](https://github.com/debug-js/debug)|4.4.3|MIT|[LICENSE](licenses/downloads/debug@4.4.3-LICENSE.txt)|
|
|
122
|
-
|[file-type](https://github.com/sindresorhus/file-type)|22.1.1|MIT|[LICENSE](licenses/downloads/file-type@22.1.1-LICENSE.txt)|
|
|
123
|
-
|[ieee754](https://github.com/feross/ieee754)|1.2.1|BSD-3-Clause|[LICENSE](licenses/downloads/ieee754@1.2.1-LICENSE.txt)|
|
|
124
|
-
|[ms](https://github.com/vercel/ms)|2.1.3|MIT|[LICENSE](licenses/downloads/ms@2.1.3-LICENSE.txt)|
|
|
125
|
-
|[strtok3](https://github.com/Borewit/strtok3)|10.3.5|MIT|[LICENSE](licenses/downloads/strtok3@10.3.5-LICENSE.txt)|
|
|
126
|
-
|[token-types](https://github.com/Borewit/token-types)|6.1.2|MIT|[LICENSE](licenses/downloads/token-types@6.1.2-LICENSE.txt)|
|
|
127
|
-
|[
|
|
128
|
-
|[
|
|
129
|
-
|[valibot](https://github.com/open-circle/valibot)|1.5.0|MIT|[LICENSE](licenses/downloads/valibot@1.5.0-LICENSE.txt)|
|
|
107
|
+
License data is updated each time `npm run document` is run, using [license-checker](https://github.com/RSeidelsohn/license-checker-rseidelsohn). The following table lists all production dependencies. These dependencies (including transitive ones) have been checked and confirmed to use BSD-3-Clause or MIT — all permissive, commercially-friendly licenses. Users of the uploaded library are covered by these checks; developers cloning this repository should independently verify development dependencies.
|
|
108
|
+
|
|
109
|
+
| Dependency | Version | License(s) | Document |
|
|
110
|
+
| :--------------------------------------------------------------------- | :-----: | :----------- | :------------------------------------------------------------------ |
|
|
111
|
+
| [@borewit/text-codec](https://github.com/Borewit/text-codec) | 0.2.2 | MIT | [LICENSE](licenses/downloads/@borewit/text-codec@0.2.2-LICENSE.txt) |
|
|
112
|
+
| [@tokenizer/inflate](https://github.com/Borewit/tokenizer-inflate) | 0.4.1 | MIT | [LICENSE](licenses/downloads/@tokenizer/inflate@0.4.1-LICENSE.txt) |
|
|
113
|
+
| [@tokenizer/token](https://github.com/Borewit/tokenizer-token) | 0.3.0 | MIT | [LICENSE](licenses/downloads/@tokenizer/token@0.3.0-LICENSE.txt) |
|
|
114
|
+
| [debug](https://github.com/debug-js/debug) | 4.4.3 | MIT | [LICENSE](licenses/downloads/debug@4.4.3-LICENSE.txt) |
|
|
115
|
+
| [file-type](https://github.com/sindresorhus/file-type) | 22.1.1 | MIT | [LICENSE](licenses/downloads/file-type@22.1.1-LICENSE.txt) |
|
|
116
|
+
| [ieee754](https://github.com/feross/ieee754) | 1.2.1 | BSD-3-Clause | [LICENSE](licenses/downloads/ieee754@1.2.1-LICENSE.txt) |
|
|
117
|
+
| [ms](https://github.com/vercel/ms) | 2.1.3 | MIT | [LICENSE](licenses/downloads/ms@2.1.3-LICENSE.txt) |
|
|
118
|
+
| [strtok3](https://github.com/Borewit/strtok3) | 10.3.5 | MIT | [LICENSE](licenses/downloads/strtok3@10.3.5-LICENSE.txt) |
|
|
119
|
+
| [token-types](https://github.com/Borewit/token-types) | 6.1.2 | MIT | [LICENSE](licenses/downloads/token-types@6.1.2-LICENSE.txt) |
|
|
120
|
+
| [uint8array-extras](https://github.com/sindresorhus/uint8array-extras) | 1.5.0 | MIT | [LICENSE](licenses/downloads/uint8array-extras@1.5.0-LICENSE.txt) |
|
|
121
|
+
| [valibot](https://github.com/open-circle/valibot) | 1.5.0 | MIT | [LICENSE](licenses/downloads/valibot@1.5.0-LICENSE.txt) |
|
|
130
122
|
|
|
131
123
|
### Dependency Tree
|
|
132
124
|
|
|
133
125
|
The dependency tree below lists every package in this project — direct and transitive — along with its installed version, release date, and update status. Packages flagged ❗ have a newer version available; ⚠️ indicates a package that hasn't been updated in the last 6 months or longer. Neither flag necessarily indicates a problem: we let new releases stabilise before upgrading, and some packages are mature and stable (have limited or no dependencies), so they require no active development.
|
|
134
126
|
|
|
135
127
|
- **[file-type](https://github.com/sindresorhus/file-type)** 22.1.1 — this month: 2026-09-17
|
|
136
|
-
|
|
137
|
-
|
|
138
|
-
|
|
128
|
+
- **[@tokenizer/inflate](https://github.com/Borewit/tokenizer-inflate)** 0.4.1 — **10 months** ago: 2025-11-18 ⚠️
|
|
129
|
+
- **[debug](https://github.com/debug-js/debug)** 4.4.3 — **12 months** ago: 2025-09-13 ⚠️
|
|
130
|
+
- **[ms](https://github.com/vercel/ms)** 2.1.3 — **69 months** ago: 2020-12-08 ⚠️
|
|
131
|
+
- **[token-types](https://github.com/Borewit/token-types)** 6.1.2 — **8 months** ago: 2026-01-01 ⚠️
|
|
132
|
+
- **[strtok3](https://github.com/Borewit/strtok3)** 10.3.5 — **6 months** ago: 2026-03-21
|
|
133
|
+
- **[@tokenizer/token](https://github.com/Borewit/tokenizer-token)** 0.3.0 — **62 months** ago: 2021-07-12 ⚠️
|
|
139
134
|
- **[token-types](https://github.com/Borewit/token-types)** 6.1.2 — **8 months** ago: 2026-01-01 ⚠️
|
|
140
|
-
|
|
141
|
-
|
|
142
|
-
|
|
143
|
-
- **[
|
|
144
|
-
- **[@tokenizer/token](https://github.com/Borewit/tokenizer-token)** 0.3.0 — **62 months** ago: 2021-07-12 ⚠️
|
|
145
|
-
- **[ieee754](https://github.com/feross/ieee754)** 1.2.1 — **70 months** ago: 2020-10-27 ⚠️
|
|
146
|
-
- **[uint8array-extras](https://github.com/sindresorhus/uint8array-extras)** 1.5.0 — **13 months** ago: 2025-08-22 ⚠️
|
|
135
|
+
- **[@borewit/text-codec](https://github.com/Borewit/text-codec)** 0.2.2 — **6 months** ago: 2026-03-11
|
|
136
|
+
- **[@tokenizer/token](https://github.com/Borewit/tokenizer-token)** 0.3.0 — **62 months** ago: 2021-07-12 ⚠️
|
|
137
|
+
- **[ieee754](https://github.com/feross/ieee754)** 1.2.1 — **71 months** ago: 2020-10-27 ⚠️
|
|
138
|
+
- **[uint8array-extras](https://github.com/sindresorhus/uint8array-extras)** 1.5.0 — **13 months** ago: 2025-08-22 ⚠️ → **latest**: 1.6.0 — this month: 2026-09-26 ❗
|
|
147
139
|
- **[valibot](https://github.com/open-circle/valibot)** 1.5.0 — this month: 2026-09-09
|
|
148
|
-
- **[typescript](https://github.com/microsoft/TypeScript)** 6.0.3 — **5 months** ago: 2026-04-16 → **latest**: 7.0.2 — **2 months** ago: 2026-07-08 ❗
|
|
149
140
|
|
|
150
141
|
<!-- DEPENDENCY_LICENSES_END -->
|
|
151
142
|
|
|
@@ -153,132 +144,136 @@ The dependency tree below lists every package in this project — direct and tra
|
|
|
153
144
|
|
|
154
145
|
## Bundle Analysis
|
|
155
146
|
|
|
156
|
-
|
|
147
|
+
This report is updated with each release, from the bundle the release builds, using [Sonda](https://sonda.dev/), which analyses final source maps to reveal the actual effects of tree-shaking and minification rather than relying on pre-build estimates.
|
|
157
148
|
|
|
158
149
|
_Note: Sonda's Vite reports currently exclude CSS files, since Vite does not generate source maps for CSS._
|
|
159
150
|
|
|
160
|
-
|Chunk/Module/File|Composition|
|
|
161
|
-
|
|
162
|
-
| dist/componentConfig.schema-DT3mO5rS.js
|
|
163
|
-
| valibot → dist/index.mjs
|
|
164
|
-
| (bundler output, whitespace & JSON)
|
|
165
|
-
| src
|
|
166
|
-
| componentConfig.schema.ts | `█░░░░░░░░░░░░░░░░░░░` 2.7%
|
|
167
|
-
| locale.schema.ts
|
|
168
|
-
| baseConfig.schema.ts
|
|
169
|
-
| schema.ts
|
|
170
|
-
| dist/dpuse-shared-encoding.es.js
|
|
171
|
-
| src → index.ts
|
|
172
|
-
| (bundler output, whitespace & JSON)
|
|
173
|
-
| dist/dpuse-shared-errors.es.js
|
|
174
|
-
| src → index.ts
|
|
175
|
-
| (bundler output, whitespace & JSON)
|
|
176
|
-
| dist/dpuse-shared-componentModuleConnector.es.js
|
|
177
|
-
| src
|
|
178
|
-
| index.ts
|
|
179
|
-
| connectorConfig.schema.ts | `░░░░░░░░░░░░░░░░░░░░` 2.3%
|
|
180
|
-
| (bundler output, whitespace & JSON)
|
|
181
|
-
| dist/dpuse-shared-utilities.es.js
|
|
182
|
-
| src → index.ts
|
|
183
|
-
| (bundler output, whitespace & JSON)
|
|
184
|
-
| dist/dpuse-shared-locale.es.js
|
|
185
|
-
| src → index.ts
|
|
186
|
-
| (bundler output, whitespace & JSON)
|
|
187
|
-
| dist/dpuse-shared-component.es.js
|
|
188
|
-
| src → index.ts
|
|
189
|
-
| (bundler output, whitespace & JSON)
|
|
190
|
-
| dist/dpuse-shared-componentModuleTool.es.js
|
|
191
|
-
| src → index.ts
|
|
192
|
-
| (bundler output, whitespace & JSON)
|
|
193
|
-
| dist/dpuse-shared-componentDataView.es.js
|
|
194
|
-
| src → index.ts
|
|
195
|
-
| (bundler output, whitespace & JSON)
|
|
196
|
-
| dist/dpuse-shared-componentModulePresenter.es.js
|
|
197
|
-
| (bundler output, whitespace & JSON)
|
|
198
|
-
| src → presenterConfig.schema.ts
|
|
199
|
-
| dist/moduleConfig.schema-aYmFWSrn.js
|
|
200
|
-
| src → moduleConfig.schema.ts
|
|
201
|
-
| (bundler output, whitespace & JSON)
|
|
202
|
-
| dist/dpuse-shared-componentModuleCookbook.es.js
|
|
203
|
-
| (bundler output, whitespace & JSON)
|
|
204
|
-
| src → cookbookConfig.schema.ts
|
|
205
|
-
| dist/label-DexpXrnC.js
|
|
206
|
-
| src → label.ts
|
|
207
|
-
| (bundler output, whitespace & JSON)
|
|
208
|
-
| dist/dpuse-shared-
|
|
209
|
-
|
|
|
210
|
-
|
|
|
211
|
-
| dist/dpuse-shared-
|
|
212
|
-
| dist/dpuse-shared-
|
|
213
|
-
| dist/dpuse-shared-
|
|
214
|
-
| dist/dpuse-shared-
|
|
215
|
-
| dist/dpuse-shared-
|
|
216
|
-
| dist/dpuse-shared-
|
|
217
|
-
| dist/dpuse-shared-
|
|
218
|
-
| dist/dpuse-shared-
|
|
219
|
-
| dist/dpuse-shared-
|
|
220
|
-
| dist/dpuse-shared-
|
|
221
|
-
| dist/dpuse-shared-
|
|
222
|
-
| dist/dpuse-shared-
|
|
223
|
-
| dist/dpuse-shared
|
|
224
|
-
| dist/dpuse-shared-componentPresentation.es.js | 0 B · gzip 20 B |
|
|
225
|
-
| dist/dpuse-shared.es.js | 0 B · gzip 20 B |
|
|
151
|
+
| Chunk/Module/File | Composition |
|
|
152
|
+
| :------------------------------------------------------------------------ | :--------------------------- |
|
|
153
|
+
| dist/componentConfig.schema-DT3mO5rS.js | 10.2 kB · gzip 2.6 kB |
|
|
154
|
+
| valibot → dist/index.mjs | `████░░░░░░░░░░░░░░░░` 20.7% |
|
|
155
|
+
| (bundler output, whitespace & JSON) | `█░░░░░░░░░░░░░░░░░░░` 5.3% |
|
|
156
|
+
| src | `█░░░░░░░░░░░░░░░░░░░` 4.2% |
|
|
157
|
+
| componentConfig.schema.ts | `█░░░░░░░░░░░░░░░░░░░` 2.7% |
|
|
158
|
+
| locale.schema.ts | `░░░░░░░░░░░░░░░░░░░░` 0.8% |
|
|
159
|
+
| baseConfig.schema.ts | `░░░░░░░░░░░░░░░░░░░░` 0.5% |
|
|
160
|
+
| schema.ts | `░░░░░░░░░░░░░░░░░░░░` 0.2% |
|
|
161
|
+
| dist/dpuse-shared-encoding.es.js | 7.4 kB · gzip 1.5 kB |
|
|
162
|
+
| src → index.ts | `████░░░░░░░░░░░░░░░░` 18.9% |
|
|
163
|
+
| (bundler output, whitespace & JSON) | `█░░░░░░░░░░░░░░░░░░░` 2.9% |
|
|
164
|
+
| dist/dpuse-shared-errors.es.js | 4.6 kB · gzip 1.7 kB |
|
|
165
|
+
| src → index.ts | `██░░░░░░░░░░░░░░░░░░` 12.3% |
|
|
166
|
+
| (bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 1.3% |
|
|
167
|
+
| dist/dpuse-shared-componentModuleConnector.es.js | 3.6 kB · gzip 1.3 kB |
|
|
168
|
+
| src | `██░░░░░░░░░░░░░░░░░░` 8.4% |
|
|
169
|
+
| index.ts | `█░░░░░░░░░░░░░░░░░░░` 6.1% |
|
|
170
|
+
| connectorConfig.schema.ts | `░░░░░░░░░░░░░░░░░░░░` 2.3% |
|
|
171
|
+
| (bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 2.1% |
|
|
172
|
+
| dist/dpuse-shared-utilities.es.js | 3.5 kB · gzip 1.3 kB |
|
|
173
|
+
| src → index.ts | `██░░░░░░░░░░░░░░░░░░` 8.9% |
|
|
174
|
+
| (bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 1.4% |
|
|
175
|
+
| dist/dpuse-shared-locale.es.js | 856 B · gzip 386 B |
|
|
176
|
+
| src → index.ts | `░░░░░░░░░░░░░░░░░░░░` 1.6% |
|
|
177
|
+
| (bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 0.9% |
|
|
178
|
+
| dist/dpuse-shared-component.es.js | 834 B · gzip 415 B |
|
|
179
|
+
| src → index.ts | `░░░░░░░░░░░░░░░░░░░░` 1.6% |
|
|
180
|
+
| (bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 0.9% |
|
|
181
|
+
| dist/dpuse-shared-componentModuleTool.es.js | 784 B · gzip 450 B |
|
|
182
|
+
| src → index.ts | `░░░░░░░░░░░░░░░░░░░░` 1.7% |
|
|
183
|
+
| (bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 0.6% |
|
|
184
|
+
| dist/dpuse-shared-componentDataView.es.js | 701 B · gzip 355 B |
|
|
185
|
+
| src → index.ts | `░░░░░░░░░░░░░░░░░░░░` 1.6% |
|
|
186
|
+
| (bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 0.4% |
|
|
187
|
+
| dist/dpuse-shared-componentModulePresenter.es.js | 411 B · gzip 269 B |
|
|
188
|
+
| (bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 0.8% |
|
|
189
|
+
| src → presenterConfig.schema.ts | `░░░░░░░░░░░░░░░░░░░░` 0.4% |
|
|
190
|
+
| dist/moduleConfig.schema-aYmFWSrn.js | 405 B · gzip 274 B |
|
|
191
|
+
| src → moduleConfig.schema.ts | `░░░░░░░░░░░░░░░░░░░░` 0.6% |
|
|
192
|
+
| (bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 0.6% |
|
|
193
|
+
| dist/dpuse-shared-componentModuleCookbook.es.js | 370 B · gzip 248 B |
|
|
194
|
+
| (bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 0.8% |
|
|
195
|
+
| src → cookbookConfig.schema.ts | `░░░░░░░░░░░░░░░░░░░░` 0.3% |
|
|
196
|
+
| dist/label-DexpXrnC.js | 361 B · gzip 251 B |
|
|
197
|
+
| src → label.ts | `░░░░░░░░░░░░░░░░░░░░` 0.8% |
|
|
198
|
+
| (bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 0.3% |
|
|
199
|
+
| dist/dpuse-shared-componentConnection.es.js | 0 B · gzip 20 B |
|
|
200
|
+
| dist/dpuse-shared-componentContext.es.js | 0 B · gzip 20 B |
|
|
201
|
+
| dist/dpuse-shared-componentContextModel.es.js | 0 B · gzip 20 B |
|
|
202
|
+
| dist/dpuse-shared-componentContextModelDimension.es.js | 0 B · gzip 20 B |
|
|
203
|
+
| dist/dpuse-shared-componentContextModelDimensionHierarchy.es.js | 0 B · gzip 20 B |
|
|
204
|
+
| dist/dpuse-shared-componentContextModelEntity.es.js | 0 B · gzip 20 B |
|
|
205
|
+
| dist/dpuse-shared-componentContextModelEntityDataItem.es.js | 0 B · gzip 20 B |
|
|
206
|
+
| dist/dpuse-shared-componentContextModelEntityEvent.es.js | 0 B · gzip 20 B |
|
|
207
|
+
| dist/dpuse-shared-componentContextModelEntityPrimaryMeasure.es.js | 0 B · gzip 20 B |
|
|
208
|
+
| dist/dpuse-shared-componentContextModelSecondaryMeasure.es.js | 0 B · gzip 20 B |
|
|
209
|
+
| dist/dpuse-shared-componentEventQuery.es.js | 0 B · gzip 20 B |
|
|
210
|
+
| dist/dpuse-shared-componentModule.es.js | 0 B · gzip 20 B |
|
|
211
|
+
| dist/dpuse-shared-componentModuleEngine.es.js | 0 B · gzip 20 B |
|
|
212
|
+
| dist/dpuse-shared-componentPresentation.es.js | 0 B · gzip 20 B |
|
|
213
|
+
| dist/dpuse-shared-componentRecipe.es.js | 0 B · gzip 20 B |
|
|
214
|
+
| dist/dpuse-shared.es.js | 0 B · gzip 20 B |
|
|
226
215
|
|
|
227
216
|
(bundler output, whitespace & JSON) = bytes Sonda can't trace to a source file: whitespace (indentation and line breaks), code the bundler generates (region comments, the combined import/export lines, its small runtime helper and wrappers), and imported JSON such as `config.json`, which the bundler doesn't map. The JSON and the generated code are real bytes that ship; the whitespace mostly disappears once compressed.
|
|
228
217
|
|
|
229
218
|
<!-- BUNDLE_END -->
|
|
230
219
|
|
|
231
|
-
<!--
|
|
220
|
+
<!-- QUALITY_SECURITY_START -->
|
|
232
221
|
|
|
233
|
-
##
|
|
222
|
+
## Quality & Security
|
|
234
223
|
|
|
235
|
-
|
|
224
|
+
This section is updated each time `npm run document` is run. Settings come from the repository's workflow files and GitHub. Test coverage and the Fallow score are measured at the same time.
|
|
236
225
|
|
|
237
|
-
|
|
226
|
+
### Testing
|
|
238
227
|
|
|
239
|
-
|Check
|
|
240
|
-
|
|
241
|
-
|[
|
|
242
|
-
|[
|
|
243
|
-
|
|
|
244
|
-
|Property-based tests|✅ fast-check|Fuzz testing: many random inputs per test to find edge cases, run with the unit tests.|
|
|
245
|
-
|npm audit|✅ On|Fails CI when any dependency has a known vulnerability.|
|
|
246
|
-
|[Socket.dev](https://socket.dev)|✅ On|Flags supply chain risk in dependencies: malicious packages, typosquatting and suspicious behaviour that may not yet have a CVE.|
|
|
247
|
-
|Dependabot alerts|✅ On|Alerts when a dependency has a known vulnerability, using the GitHub Advisory Database.|
|
|
248
|
-
|Dependabot security updates|❌ Off|Opens pull requests that update vulnerable dependencies.|
|
|
249
|
-
|Dependabot version updates|❌ Off|Opens pull requests for new dependency versions.|
|
|
250
|
-
|Secret scanning|✅ On|Detects credentials, such as API keys and tokens, committed to the repository.|
|
|
251
|
-
|Push protection|✅ On|Blocks pushes that contain credentials.|
|
|
252
|
-
|Private vulnerability reporting|✅ On|Lets anyone report a vulnerability privately. See [Reporting Vulnerabilities](#reporting-vulnerabilities).|
|
|
228
|
+
| Check | Status | What it does |
|
|
229
|
+
| :------------------- | :----- | :----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
|
230
|
+
| Unit tests | ✅ On | [Vitest](https://vitest.dev) runs the unit tests. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push to `main`. |
|
|
231
|
+
| Property-based tests | ✅ On | [fast-check](https://fast-check.dev) runs many random inputs per test to find edge cases, alongside the unit tests. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push to `main`. |
|
|
232
|
+
| Test coverage | ✅ On |  [Vitest's V8 coverage](https://vitest.dev/guide/coverage) measures the share of source lines the unit tests run. The target is 80%. |
|
|
253
233
|
|
|
254
|
-
### Code
|
|
234
|
+
### Code Quality
|
|
255
235
|
|
|
256
|
-
|
|
236
|
+
| Check | Status | What it does |
|
|
237
|
+
| :------------ | :----- | :-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
|
238
|
+
| Code health | ✅ On | [](./code-health-reports/fallow/index.md) [Fallow](https://github.com/fallow-rs/fallow) finds unused code, duplication, complexity and dependency problems. |
|
|
239
|
+
| Code analysis | ✅ On | [](https://sonarcloud.io/summary/new_code?id=dpuse_dpuse-shared) [SonarCloud](https://sonarcloud.io) checks every push for bugs, code smells and vulnerabilities. |
|
|
240
|
+
| Linting | ✅ On | [ESLint](https://eslint.org) checks the code for errors and style problems. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push to `main`. |
|
|
257
241
|
|
|
258
|
-
|
|
242
|
+
### Security Analysis
|
|
259
243
|
|
|
260
|
-
|
|
|
261
|
-
|
|
262
|
-
|
|
|
263
|
-
|
|
|
264
|
-
|
|
|
265
|
-
|Unused exports|0.0%|
|
|
266
|
-
|Duplicated code|0.0%|
|
|
267
|
-
|Functions over the complexity limits|0 of 83|
|
|
268
|
-
|Unused dependencies|0|
|
|
269
|
-
|Circular dependencies|0|
|
|
270
|
-
|Hotspots (complex and often changed)|1|
|
|
244
|
+
| Check | Status | What it does |
|
|
245
|
+
| :-------------- | :----- | :----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
|
246
|
+
| Push protection | ✅ On | [GitHub push protection](https://docs.github.com/en/code-security/secret-scanning/push-protection-for-repositories-and-organizations) blocks pushes that contain credentials. |
|
|
247
|
+
| Static analysis | ✅ On | [](https://github.com/dpuse/dpuse-shared/security/code-scanning) [CodeQL](https://codeql.github.com) scans GitHub Actions and JavaScript/TypeScript for security vulnerabilities, using the extended security queries, on every push and pull request to `main` and weekly. |
|
|
248
|
+
| Secret scanning | ✅ On | [GitHub secret scanning](https://docs.github.com/en/code-security/secret-scanning) detects credentials, such as API keys and tokens, committed to the repository. |
|
|
271
249
|
|
|
272
|
-
###
|
|
250
|
+
### Dependencies
|
|
273
251
|
|
|
274
|
-
|
|
252
|
+
| Check | Status | What it does |
|
|
253
|
+
| :------------------ | :----- | :--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
|
254
|
+
| Vulnerability audit | ✅ On | [npm audit](https://docs.npmjs.com/cli/commands/npm-audit) fails when any dependency has a known vulnerability. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push to `main`. |
|
|
255
|
+
| Supply chain risk | ✅ On | [Socket](https://socket.dev) flags malicious packages, typosquatting and suspicious behaviour that may not yet have a CVE. |
|
|
256
|
+
| Security alerts | ✅ On | [Dependabot](https://docs.github.com/en/code-security/dependabot) alerts when a dependency has a known vulnerability, using the GitHub Advisory Database. |
|
|
257
|
+
| Security updates | ❌ Off | [Dependabot](https://docs.github.com/en/code-security/dependabot) opens pull requests that update vulnerable dependencies. These are handled manually. |
|
|
258
|
+
| Version updates | ❌ Off | [Dependabot](https://docs.github.com/en/code-security/dependabot) opens pull requests for new dependency versions. These are handled manually. |
|
|
275
259
|
|
|
276
260
|
### OpenSSF 🚧
|
|
277
261
|
|
|
278
262
|
[](https://www.bestpractices.dev/projects/14952)
|
|
279
263
|
[](https://scorecard.dev/viewer/?uri=github.com/dpuse/dpuse-shared)
|
|
280
264
|
|
|
281
|
-
This project is working towards the [OpenSSF Best Practices](https://www.bestpractices.dev) Passing badge, a self-certification covering security policy, vulnerability reporting, build processes, code quality, and more. Currently the [OpenSSF Scorecard](https://scorecard.dev
|
|
265
|
+
This project is working towards the [OpenSSF Best Practices](https://www.bestpractices.dev) Passing badge, a self-certification covering security policy, vulnerability reporting, build processes, code quality, and more. Currently the [OpenSSF Scorecard](https://scorecard.dev) provides an independent automated assessment of the project's security practices and is an ongoing area of improvement.
|
|
266
|
+
|
|
267
|
+
> [!NOTE]
|
|
268
|
+
> Apart from the Best Practices badge above, the remaining Scorecard gaps need multi-person review or a pull-request workflow, which this solo-maintained project doesn't use.
|
|
269
|
+
|
|
270
|
+
### Reporting Vulnerabilities
|
|
271
|
+
|
|
272
|
+
Please do not open public GitHub issues for security vulnerabilities. Use [GitHub private vulnerability reporting](https://github.com/dpuse/dpuse-shared/security/advisories/new) instead. See [SECURITY.md](./SECURITY.md) for the full disclosure policy, contact details, and expected response times.
|
|
273
|
+
|
|
274
|
+
<!-- QUALITY_SECURITY_END -->
|
|
275
|
+
|
|
276
|
+
<!-- CONTRIBUTING_LICENSE_START -->
|
|
282
277
|
|
|
283
278
|
## Contributing
|
|
284
279
|
|
|
@@ -292,4 +287,4 @@ This project is licensed under the MIT License, permitting free use, modificatio
|
|
|
292
287
|
|
|
293
288
|
[MIT](./LICENSE) © 2026 Jonathan Terrell
|
|
294
289
|
|
|
295
|
-
<!--
|
|
290
|
+
<!-- CONTRIBUTING_LICENSE_END -->
|