@dpuse/dpuse-shared 0.3.851 → 0.3.863
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +143 -154
- package/dist/componentConfig.schema-DT3mO5rS.js.map +1 -1
- package/dist/dpuse-shared-component.es.js.map +1 -1
- package/dist/dpuse-shared-componentDataView.es.js.map +1 -1
- package/dist/dpuse-shared-componentModuleConnector.es.js +1 -1
- package/dist/dpuse-shared-componentModuleConnector.es.js.map +1 -1
- package/dist/dpuse-shared-componentRecipe.es.js +0 -4
- package/dist/dpuse-shared-encoding.es.js.map +1 -1
- package/dist/dpuse-shared-errors.es.js +1 -1
- package/dist/dpuse-shared-errors.es.js.map +1 -1
- package/dist/dpuse-shared-locale.es.js.map +1 -1
- package/dist/label-DexpXrnC.js.map +1 -1
- package/dist/types/src/component/connection/index.d.ts +5 -4
- package/dist/types/src/component/context/index.d.ts +2 -1
- package/dist/types/src/component/context/model/entity/event/index.d.ts +2 -1
- package/dist/types/src/component/context/model/entity/index.d.ts +2 -1
- package/dist/types/src/component/dataView/index.d.ts +8 -7
- package/dist/types/src/component/index.d.ts +2 -3
- package/dist/types/src/component/module/connector/index.d.ts +1 -11
- package/dist/types/src/component/module/cookbook/index.d.ts +1 -2
- package/dist/types/src/component/module/index.d.ts +1 -2
- package/dist/types/src/component/presentation/index.d.ts +0 -12
- package/dist/types/src/component/recipe/index.d.ts +1 -2
- package/dist/types/src/encoding/index.d.ts +4 -4
- package/dist/types/src/errors/index.d.ts +2 -1
- package/dist/types/src/locale/label.d.ts +2 -1
- package/package.json +9 -16
- package/dist/dpuse-shared-componentRecipe.es.js.map +0 -1
package/README.md
CHANGED
|
@@ -5,10 +5,10 @@
|
|
|
5
5
|
[](./LICENSE)
|
|
6
6
|
[](https://github.com/dpuse/dpuse-shared/releases/latest)
|
|
7
7
|
[](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml)
|
|
8
|
-
[](https://github.com/dpuse/dpuse-shared/actions/workflows/codeql.yml)
|
|
9
|
-
[](https://sonarcloud.io/summary/new_code?id=dpuse_dpuse-shared)
|
|
10
8
|
|
|
11
|
-
[
|
|
9
|
+
[DPUse](https://www.dpuse.app) · [Report a Vulnerability](https://github.com/dpuse/dpuse-shared/security/advisories/new) · [Open an Issue](https://github.com/dpuse/dpuse-shared/issues)
|
|
10
|
+
|
|
11
|
+
Common constants, types and utilities used across all DPUse projects.
|
|
12
12
|
|
|
13
13
|
## About DPUse
|
|
14
14
|
|
|
@@ -24,7 +24,9 @@ In addition, DPUse provides [Tools](https://www.dpuse.app) used by the applicati
|
|
|
24
24
|
|
|
25
25
|
## Introduction
|
|
26
26
|
|
|
27
|
-
@dpuse/dpuse-shared is the foundational library for the [DPUse](https://www.dpuse.app/) ecosystem. It provides the common constants, types, errors, and utilities that are shared across all DPUse modules — including the App, API, Engine, Connectors, Contexts, Presenters and Recipes
|
|
27
|
+
@dpuse/dpuse-shared is the foundational library for the [DPUse](https://www.dpuse.app/) ecosystem. It provides the common constants, types, errors, and utilities that are shared across all DPUse modules — including the App, API, Engine, Connectors, Contexts, Presenters and Recipes.
|
|
28
|
+
|
|
29
|
+
The library is written in TypeScript and designed to be consumed exclusively by TypeScript projects. All configuration types are schema-validated using [Valibot](https://valibot.dev/), giving consumers both compile-time safety and runtime validation from a single source of truth.
|
|
28
30
|
|
|
29
31
|
<!-- OPENING_END -->
|
|
30
32
|
|
|
@@ -32,13 +34,13 @@ In addition, DPUse provides [Tools](https://www.dpuse.app) used by the applicati
|
|
|
32
34
|
|
|
33
35
|
## Usage
|
|
34
36
|
|
|
35
|
-
This package
|
|
37
|
+
This [package](https://www.npmjs.com/package/@dpuse/dpuse-shared) is available on [npm](https://www.npmjs.com/). Install it with:
|
|
36
38
|
|
|
37
39
|
```bash
|
|
38
40
|
npm install @dpuse/dpuse-shared
|
|
39
41
|
```
|
|
40
42
|
|
|
41
|
-
To work on the source instead, clone this repository.
|
|
43
|
+
To work on the source instead, clone this repository.
|
|
42
44
|
|
|
43
45
|
```bash
|
|
44
46
|
git clone https://github.com/dpuse/dpuse-shared.git
|
|
@@ -48,24 +50,11 @@ npm install
|
|
|
48
50
|
|
|
49
51
|
_Requires [Node.js](https://nodejs.org/) 24 or later, [npm](https://www.npmjs.com/) 12 or later, and [TypeScript](https://www.typescriptlang.org/) 6.0.3 or later._
|
|
50
52
|
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
### OLD Installation
|
|
54
|
-
|
|
55
|
-
`@dpuse/dpuse-shared` is published to the [public npm registry](https://www.npmjs.com/package/@dpuse/dpuse-shared). Install it using your preferred package manager:
|
|
53
|
+
This repository is managed using the common set of actions provided by [@dpuse/dpuse-development](https://github.com/dpuse/dpuse-development). See the `scripts` block in [package.json](https://github.com/dpuse/dpuse-shared/blob/main/package.json) for details.
|
|
56
54
|
|
|
57
|
-
|
|
58
|
-
# npm
|
|
59
|
-
npm install @dpuse/dpuse-shared
|
|
60
|
-
|
|
61
|
-
# yarn
|
|
62
|
-
yarn add @dpuse/dpuse-shared
|
|
63
|
-
|
|
64
|
-
# pnpm
|
|
65
|
-
pnpm add @dpuse/dpuse-shared
|
|
66
|
-
```
|
|
55
|
+
<!-- USAGE_END -->
|
|
67
56
|
|
|
68
|
-
###
|
|
57
|
+
### Example
|
|
69
58
|
|
|
70
59
|
This package uses [sub-path exports](https://nodejs.org/api/packages.html#subpath-exports). Import only the entry points you need:
|
|
71
60
|
|
|
@@ -83,8 +72,6 @@ try {
|
|
|
83
72
|
}
|
|
84
73
|
```
|
|
85
74
|
|
|
86
|
-
Implements the common Data Positioning repository management command set. For more information see [@dpuse/dpuse-development](https://github.com/dpuse/dpuse-development).
|
|
87
|
-
|
|
88
75
|
## Architecture
|
|
89
76
|
|
|
90
77
|
### Component Hierarchy
|
|
@@ -117,41 +104,39 @@ See [API_REFERENCE.md](./API_REFERENCE.md) for the complete API reference, inclu
|
|
|
117
104
|
|
|
118
105
|
## Dependency Licenses
|
|
119
106
|
|
|
120
|
-
License data is
|
|
121
|
-
|
|
122
|
-
|Dependency|Version|License(s)|Document|
|
|
123
|
-
|
|
124
|
-
|[@borewit/text-codec](https://github.com/Borewit/text-codec)|0.2.2|MIT|[LICENSE](licenses/downloads/@borewit/text-codec@0.2.2-LICENSE.txt)|
|
|
125
|
-
|[@tokenizer/inflate](https://github.com/Borewit/tokenizer-inflate)|0.4.1|MIT|[LICENSE](licenses/downloads/@tokenizer/inflate@0.4.1-LICENSE.txt)|
|
|
126
|
-
|[@tokenizer/token](https://github.com/Borewit/tokenizer-token)|0.3.0|MIT|[LICENSE](licenses/downloads/@tokenizer/token@0.3.0-LICENSE.txt)|
|
|
127
|
-
|[debug](https://github.com/debug-js/debug)|4.4.3|MIT|[LICENSE](licenses/downloads/debug@4.4.3-LICENSE.txt)|
|
|
128
|
-
|[file-type](https://github.com/sindresorhus/file-type)|22.1.1|MIT|[LICENSE](licenses/downloads/file-type@22.1.1-LICENSE.txt)|
|
|
129
|
-
|[ieee754](https://github.com/feross/ieee754)|1.2.1|BSD-3-Clause|[LICENSE](licenses/downloads/ieee754@1.2.1-LICENSE.txt)|
|
|
130
|
-
|[ms](https://github.com/vercel/ms)|2.1.3|MIT|[LICENSE](licenses/downloads/ms@2.1.3-LICENSE.txt)|
|
|
131
|
-
|[strtok3](https://github.com/Borewit/strtok3)|10.3.5|MIT|[LICENSE](licenses/downloads/strtok3@10.3.5-LICENSE.txt)|
|
|
132
|
-
|[token-types](https://github.com/Borewit/token-types)|6.1.2|MIT|[LICENSE](licenses/downloads/token-types@6.1.2-LICENSE.txt)|
|
|
133
|
-
|[
|
|
134
|
-
|[
|
|
135
|
-
|[valibot](https://github.com/open-circle/valibot)|1.5.0|MIT|[LICENSE](licenses/downloads/valibot@1.5.0-LICENSE.txt)|
|
|
107
|
+
License data is updated each time `npm run document` is run, using [license-checker](https://github.com/RSeidelsohn/license-checker-rseidelsohn). The following table lists all production dependencies. These dependencies (including transitive ones) have been checked and confirmed to use BSD-3-Clause or MIT — all permissive, commercially-friendly licenses. Users of the uploaded library are covered by these checks; developers cloning this repository should independently verify development dependencies.
|
|
108
|
+
|
|
109
|
+
| Dependency | Version | License(s) | Document |
|
|
110
|
+
| :--------------------------------------------------------------------- | :-----: | :----------- | :------------------------------------------------------------------ |
|
|
111
|
+
| [@borewit/text-codec](https://github.com/Borewit/text-codec) | 0.2.2 | MIT | [LICENSE](licenses/downloads/@borewit/text-codec@0.2.2-LICENSE.txt) |
|
|
112
|
+
| [@tokenizer/inflate](https://github.com/Borewit/tokenizer-inflate) | 0.4.1 | MIT | [LICENSE](licenses/downloads/@tokenizer/inflate@0.4.1-LICENSE.txt) |
|
|
113
|
+
| [@tokenizer/token](https://github.com/Borewit/tokenizer-token) | 0.3.0 | MIT | [LICENSE](licenses/downloads/@tokenizer/token@0.3.0-LICENSE.txt) |
|
|
114
|
+
| [debug](https://github.com/debug-js/debug) | 4.4.3 | MIT | [LICENSE](licenses/downloads/debug@4.4.3-LICENSE.txt) |
|
|
115
|
+
| [file-type](https://github.com/sindresorhus/file-type) | 22.1.1 | MIT | [LICENSE](licenses/downloads/file-type@22.1.1-LICENSE.txt) |
|
|
116
|
+
| [ieee754](https://github.com/feross/ieee754) | 1.2.1 | BSD-3-Clause | [LICENSE](licenses/downloads/ieee754@1.2.1-LICENSE.txt) |
|
|
117
|
+
| [ms](https://github.com/vercel/ms) | 2.1.3 | MIT | [LICENSE](licenses/downloads/ms@2.1.3-LICENSE.txt) |
|
|
118
|
+
| [strtok3](https://github.com/Borewit/strtok3) | 10.3.5 | MIT | [LICENSE](licenses/downloads/strtok3@10.3.5-LICENSE.txt) |
|
|
119
|
+
| [token-types](https://github.com/Borewit/token-types) | 6.1.2 | MIT | [LICENSE](licenses/downloads/token-types@6.1.2-LICENSE.txt) |
|
|
120
|
+
| [uint8array-extras](https://github.com/sindresorhus/uint8array-extras) | 1.5.0 | MIT | [LICENSE](licenses/downloads/uint8array-extras@1.5.0-LICENSE.txt) |
|
|
121
|
+
| [valibot](https://github.com/open-circle/valibot) | 1.5.0 | MIT | [LICENSE](licenses/downloads/valibot@1.5.0-LICENSE.txt) |
|
|
136
122
|
|
|
137
123
|
### Dependency Tree
|
|
138
124
|
|
|
139
125
|
The dependency tree below lists every package in this project — direct and transitive — along with its installed version, release date, and update status. Packages flagged ❗ have a newer version available; ⚠️ indicates a package that hasn't been updated in the last 6 months or longer. Neither flag necessarily indicates a problem: we let new releases stabilise before upgrading, and some packages are mature and stable (have limited or no dependencies), so they require no active development.
|
|
140
126
|
|
|
141
127
|
- **[file-type](https://github.com/sindresorhus/file-type)** 22.1.1 — this month: 2026-09-17
|
|
142
|
-
|
|
143
|
-
|
|
144
|
-
|
|
128
|
+
- **[@tokenizer/inflate](https://github.com/Borewit/tokenizer-inflate)** 0.4.1 — **10 months** ago: 2025-11-18 ⚠️
|
|
129
|
+
- **[debug](https://github.com/debug-js/debug)** 4.4.3 — **12 months** ago: 2025-09-13 ⚠️
|
|
130
|
+
- **[ms](https://github.com/vercel/ms)** 2.1.3 — **69 months** ago: 2020-12-08 ⚠️
|
|
131
|
+
- **[token-types](https://github.com/Borewit/token-types)** 6.1.2 — **8 months** ago: 2026-01-01 ⚠️
|
|
132
|
+
- **[strtok3](https://github.com/Borewit/strtok3)** 10.3.5 — **6 months** ago: 2026-03-21
|
|
133
|
+
- **[@tokenizer/token](https://github.com/Borewit/tokenizer-token)** 0.3.0 — **62 months** ago: 2021-07-12 ⚠️
|
|
145
134
|
- **[token-types](https://github.com/Borewit/token-types)** 6.1.2 — **8 months** ago: 2026-01-01 ⚠️
|
|
146
|
-
|
|
147
|
-
|
|
148
|
-
|
|
149
|
-
- **[
|
|
150
|
-
- **[@tokenizer/token](https://github.com/Borewit/tokenizer-token)** 0.3.0 — **62 months** ago: 2021-07-12 ⚠️
|
|
151
|
-
- **[ieee754](https://github.com/feross/ieee754)** 1.2.1 — **70 months** ago: 2020-10-27 ⚠️
|
|
152
|
-
- **[uint8array-extras](https://github.com/sindresorhus/uint8array-extras)** 1.5.0 — **13 months** ago: 2025-08-22 ⚠️
|
|
135
|
+
- **[@borewit/text-codec](https://github.com/Borewit/text-codec)** 0.2.2 — **6 months** ago: 2026-03-11
|
|
136
|
+
- **[@tokenizer/token](https://github.com/Borewit/tokenizer-token)** 0.3.0 — **62 months** ago: 2021-07-12 ⚠️
|
|
137
|
+
- **[ieee754](https://github.com/feross/ieee754)** 1.2.1 — **71 months** ago: 2020-10-27 ⚠️
|
|
138
|
+
- **[uint8array-extras](https://github.com/sindresorhus/uint8array-extras)** 1.5.0 — **13 months** ago: 2025-08-22 ⚠️ → **latest**: 1.6.0 — this month: 2026-09-26 ❗
|
|
153
139
|
- **[valibot](https://github.com/open-circle/valibot)** 1.5.0 — this month: 2026-09-09
|
|
154
|
-
- **[typescript](https://github.com/microsoft/TypeScript)** 6.0.3 — **5 months** ago: 2026-04-16 → **latest**: 7.0.2 — **2 months** ago: 2026-07-08 ❗
|
|
155
140
|
|
|
156
141
|
<!-- DEPENDENCY_LICENSES_END -->
|
|
157
142
|
|
|
@@ -159,132 +144,136 @@ The dependency tree below lists every package in this project — direct and tra
|
|
|
159
144
|
|
|
160
145
|
## Bundle Analysis
|
|
161
146
|
|
|
162
|
-
|
|
147
|
+
This report is updated with each release, from the bundle the release builds, using [Sonda](https://sonda.dev/), which analyses final source maps to reveal the actual effects of tree-shaking and minification rather than relying on pre-build estimates.
|
|
163
148
|
|
|
164
149
|
_Note: Sonda's Vite reports currently exclude CSS files, since Vite does not generate source maps for CSS._
|
|
165
150
|
|
|
166
|
-
|Chunk/Module/File|Composition|
|
|
167
|
-
|
|
168
|
-
| dist/componentConfig.schema-DT3mO5rS.js
|
|
169
|
-
| valibot → dist/index.mjs
|
|
170
|
-
| (bundler output, whitespace & JSON)
|
|
171
|
-
| src
|
|
172
|
-
| componentConfig.schema.ts | `█░░░░░░░░░░░░░░░░░░░` 2.7%
|
|
173
|
-
| locale.schema.ts
|
|
174
|
-
| baseConfig.schema.ts
|
|
175
|
-
| schema.ts
|
|
176
|
-
| dist/dpuse-shared-encoding.es.js
|
|
177
|
-
| src → index.ts
|
|
178
|
-
| (bundler output, whitespace & JSON)
|
|
179
|
-
| dist/dpuse-shared-errors.es.js
|
|
180
|
-
| src → index.ts
|
|
181
|
-
| (bundler output, whitespace & JSON)
|
|
182
|
-
| dist/dpuse-shared-componentModuleConnector.es.js
|
|
183
|
-
| src
|
|
184
|
-
| index.ts
|
|
185
|
-
| connectorConfig.schema.ts | `░░░░░░░░░░░░░░░░░░░░` 2.3%
|
|
186
|
-
| (bundler output, whitespace & JSON)
|
|
187
|
-
| dist/dpuse-shared-utilities.es.js
|
|
188
|
-
| src → index.ts
|
|
189
|
-
| (bundler output, whitespace & JSON)
|
|
190
|
-
| dist/dpuse-shared-locale.es.js
|
|
191
|
-
| src → index.ts
|
|
192
|
-
| (bundler output, whitespace & JSON)
|
|
193
|
-
| dist/dpuse-shared-component.es.js
|
|
194
|
-
| src → index.ts
|
|
195
|
-
| (bundler output, whitespace & JSON)
|
|
196
|
-
| dist/dpuse-shared-componentModuleTool.es.js
|
|
197
|
-
| src → index.ts
|
|
198
|
-
| (bundler output, whitespace & JSON)
|
|
199
|
-
| dist/dpuse-shared-componentDataView.es.js
|
|
200
|
-
| src → index.ts
|
|
201
|
-
| (bundler output, whitespace & JSON)
|
|
202
|
-
| dist/dpuse-shared-componentModulePresenter.es.js
|
|
203
|
-
| (bundler output, whitespace & JSON)
|
|
204
|
-
| src → presenterConfig.schema.ts
|
|
205
|
-
| dist/moduleConfig.schema-aYmFWSrn.js
|
|
206
|
-
| src → moduleConfig.schema.ts
|
|
207
|
-
| (bundler output, whitespace & JSON)
|
|
208
|
-
| dist/dpuse-shared-componentModuleCookbook.es.js
|
|
209
|
-
| (bundler output, whitespace & JSON)
|
|
210
|
-
| src → cookbookConfig.schema.ts
|
|
211
|
-
| dist/label-DexpXrnC.js
|
|
212
|
-
| src → label.ts
|
|
213
|
-
| (bundler output, whitespace & JSON)
|
|
214
|
-
| dist/dpuse-shared-
|
|
215
|
-
|
|
|
216
|
-
|
|
|
217
|
-
| dist/dpuse-shared-
|
|
218
|
-
| dist/dpuse-shared-
|
|
219
|
-
| dist/dpuse-shared-
|
|
220
|
-
| dist/dpuse-shared-
|
|
221
|
-
| dist/dpuse-shared-
|
|
222
|
-
| dist/dpuse-shared-
|
|
223
|
-
| dist/dpuse-shared-
|
|
224
|
-
| dist/dpuse-shared-
|
|
225
|
-
| dist/dpuse-shared-
|
|
226
|
-
| dist/dpuse-shared-
|
|
227
|
-
| dist/dpuse-shared-
|
|
228
|
-
| dist/dpuse-shared-
|
|
229
|
-
| dist/dpuse-shared
|
|
230
|
-
| dist/dpuse-shared-componentPresentation.es.js | 0 B · gzip 20 B |
|
|
231
|
-
| dist/dpuse-shared.es.js | 0 B · gzip 20 B |
|
|
151
|
+
| Chunk/Module/File | Composition |
|
|
152
|
+
| :------------------------------------------------------------------------ | :--------------------------- |
|
|
153
|
+
| dist/componentConfig.schema-DT3mO5rS.js | 10.2 kB · gzip 2.6 kB |
|
|
154
|
+
| valibot → dist/index.mjs | `████░░░░░░░░░░░░░░░░` 20.7% |
|
|
155
|
+
| (bundler output, whitespace & JSON) | `█░░░░░░░░░░░░░░░░░░░` 5.3% |
|
|
156
|
+
| src | `█░░░░░░░░░░░░░░░░░░░` 4.2% |
|
|
157
|
+
| componentConfig.schema.ts | `█░░░░░░░░░░░░░░░░░░░` 2.7% |
|
|
158
|
+
| locale.schema.ts | `░░░░░░░░░░░░░░░░░░░░` 0.8% |
|
|
159
|
+
| baseConfig.schema.ts | `░░░░░░░░░░░░░░░░░░░░` 0.5% |
|
|
160
|
+
| schema.ts | `░░░░░░░░░░░░░░░░░░░░` 0.2% |
|
|
161
|
+
| dist/dpuse-shared-encoding.es.js | 7.4 kB · gzip 1.5 kB |
|
|
162
|
+
| src → index.ts | `████░░░░░░░░░░░░░░░░` 18.9% |
|
|
163
|
+
| (bundler output, whitespace & JSON) | `█░░░░░░░░░░░░░░░░░░░` 2.9% |
|
|
164
|
+
| dist/dpuse-shared-errors.es.js | 4.6 kB · gzip 1.7 kB |
|
|
165
|
+
| src → index.ts | `██░░░░░░░░░░░░░░░░░░` 12.3% |
|
|
166
|
+
| (bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 1.3% |
|
|
167
|
+
| dist/dpuse-shared-componentModuleConnector.es.js | 3.6 kB · gzip 1.3 kB |
|
|
168
|
+
| src | `██░░░░░░░░░░░░░░░░░░` 8.4% |
|
|
169
|
+
| index.ts | `█░░░░░░░░░░░░░░░░░░░` 6.1% |
|
|
170
|
+
| connectorConfig.schema.ts | `░░░░░░░░░░░░░░░░░░░░` 2.3% |
|
|
171
|
+
| (bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 2.1% |
|
|
172
|
+
| dist/dpuse-shared-utilities.es.js | 3.5 kB · gzip 1.3 kB |
|
|
173
|
+
| src → index.ts | `██░░░░░░░░░░░░░░░░░░` 8.9% |
|
|
174
|
+
| (bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 1.4% |
|
|
175
|
+
| dist/dpuse-shared-locale.es.js | 856 B · gzip 386 B |
|
|
176
|
+
| src → index.ts | `░░░░░░░░░░░░░░░░░░░░` 1.6% |
|
|
177
|
+
| (bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 0.9% |
|
|
178
|
+
| dist/dpuse-shared-component.es.js | 834 B · gzip 415 B |
|
|
179
|
+
| src → index.ts | `░░░░░░░░░░░░░░░░░░░░` 1.6% |
|
|
180
|
+
| (bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 0.9% |
|
|
181
|
+
| dist/dpuse-shared-componentModuleTool.es.js | 784 B · gzip 450 B |
|
|
182
|
+
| src → index.ts | `░░░░░░░░░░░░░░░░░░░░` 1.7% |
|
|
183
|
+
| (bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 0.6% |
|
|
184
|
+
| dist/dpuse-shared-componentDataView.es.js | 701 B · gzip 355 B |
|
|
185
|
+
| src → index.ts | `░░░░░░░░░░░░░░░░░░░░` 1.6% |
|
|
186
|
+
| (bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 0.4% |
|
|
187
|
+
| dist/dpuse-shared-componentModulePresenter.es.js | 411 B · gzip 269 B |
|
|
188
|
+
| (bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 0.8% |
|
|
189
|
+
| src → presenterConfig.schema.ts | `░░░░░░░░░░░░░░░░░░░░` 0.4% |
|
|
190
|
+
| dist/moduleConfig.schema-aYmFWSrn.js | 405 B · gzip 274 B |
|
|
191
|
+
| src → moduleConfig.schema.ts | `░░░░░░░░░░░░░░░░░░░░` 0.6% |
|
|
192
|
+
| (bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 0.6% |
|
|
193
|
+
| dist/dpuse-shared-componentModuleCookbook.es.js | 370 B · gzip 248 B |
|
|
194
|
+
| (bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 0.8% |
|
|
195
|
+
| src → cookbookConfig.schema.ts | `░░░░░░░░░░░░░░░░░░░░` 0.3% |
|
|
196
|
+
| dist/label-DexpXrnC.js | 361 B · gzip 251 B |
|
|
197
|
+
| src → label.ts | `░░░░░░░░░░░░░░░░░░░░` 0.8% |
|
|
198
|
+
| (bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 0.3% |
|
|
199
|
+
| dist/dpuse-shared-componentConnection.es.js | 0 B · gzip 20 B |
|
|
200
|
+
| dist/dpuse-shared-componentContext.es.js | 0 B · gzip 20 B |
|
|
201
|
+
| dist/dpuse-shared-componentContextModel.es.js | 0 B · gzip 20 B |
|
|
202
|
+
| dist/dpuse-shared-componentContextModelDimension.es.js | 0 B · gzip 20 B |
|
|
203
|
+
| dist/dpuse-shared-componentContextModelDimensionHierarchy.es.js | 0 B · gzip 20 B |
|
|
204
|
+
| dist/dpuse-shared-componentContextModelEntity.es.js | 0 B · gzip 20 B |
|
|
205
|
+
| dist/dpuse-shared-componentContextModelEntityDataItem.es.js | 0 B · gzip 20 B |
|
|
206
|
+
| dist/dpuse-shared-componentContextModelEntityEvent.es.js | 0 B · gzip 20 B |
|
|
207
|
+
| dist/dpuse-shared-componentContextModelEntityPrimaryMeasure.es.js | 0 B · gzip 20 B |
|
|
208
|
+
| dist/dpuse-shared-componentContextModelSecondaryMeasure.es.js | 0 B · gzip 20 B |
|
|
209
|
+
| dist/dpuse-shared-componentEventQuery.es.js | 0 B · gzip 20 B |
|
|
210
|
+
| dist/dpuse-shared-componentModule.es.js | 0 B · gzip 20 B |
|
|
211
|
+
| dist/dpuse-shared-componentModuleEngine.es.js | 0 B · gzip 20 B |
|
|
212
|
+
| dist/dpuse-shared-componentPresentation.es.js | 0 B · gzip 20 B |
|
|
213
|
+
| dist/dpuse-shared-componentRecipe.es.js | 0 B · gzip 20 B |
|
|
214
|
+
| dist/dpuse-shared.es.js | 0 B · gzip 20 B |
|
|
232
215
|
|
|
233
216
|
(bundler output, whitespace & JSON) = bytes Sonda can't trace to a source file: whitespace (indentation and line breaks), code the bundler generates (region comments, the combined import/export lines, its small runtime helper and wrappers), and imported JSON such as `config.json`, which the bundler doesn't map. The JSON and the generated code are real bytes that ship; the whitespace mostly disappears once compressed.
|
|
234
217
|
|
|
235
218
|
<!-- BUNDLE_END -->
|
|
236
219
|
|
|
237
|
-
<!--
|
|
220
|
+
<!-- QUALITY_SECURITY_START -->
|
|
238
221
|
|
|
239
|
-
##
|
|
222
|
+
## Quality & Security
|
|
240
223
|
|
|
241
|
-
|
|
224
|
+
This section is updated each time `npm run document` is run. Settings come from the repository's workflow files and GitHub. Test coverage and the Fallow score are measured at the same time.
|
|
242
225
|
|
|
243
|
-
|
|
226
|
+
### Testing
|
|
244
227
|
|
|
245
|
-
|Check
|
|
246
|
-
|
|
247
|
-
|[
|
|
248
|
-
|[
|
|
249
|
-
|
|
|
250
|
-
|Property-based tests|✅ fast-check|Fuzz testing: many random inputs per test to find edge cases, run with the unit tests.|
|
|
251
|
-
|npm audit|✅ On|Fails CI when any dependency has a known vulnerability.|
|
|
252
|
-
|[Socket.dev](https://socket.dev)|✅ On|Flags supply chain risk in dependencies: malicious packages, typosquatting and suspicious behaviour that may not yet have a CVE.|
|
|
253
|
-
|Dependabot alerts|✅ On|Alerts when a dependency has a known vulnerability, using the GitHub Advisory Database.|
|
|
254
|
-
|Dependabot security updates|❌ Off|Opens pull requests that update vulnerable dependencies.|
|
|
255
|
-
|Dependabot version updates|❌ Off|Opens pull requests for new dependency versions.|
|
|
256
|
-
|Secret scanning|✅ On|Detects credentials, such as API keys and tokens, committed to the repository.|
|
|
257
|
-
|Push protection|✅ On|Blocks pushes that contain credentials.|
|
|
258
|
-
|Private vulnerability reporting|✅ On|Lets anyone report a vulnerability privately. See [Reporting Vulnerabilities](#reporting-vulnerabilities).|
|
|
228
|
+
| Check | Status | What it does |
|
|
229
|
+
| :------------------- | :----- | :----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
|
230
|
+
| Unit tests | ✅ On | [Vitest](https://vitest.dev) runs the unit tests. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push to `main`. |
|
|
231
|
+
| Property-based tests | ✅ On | [fast-check](https://fast-check.dev) runs many random inputs per test to find edge cases, alongside the unit tests. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push to `main`. |
|
|
232
|
+
| Test coverage | ✅ On |  [Vitest's V8 coverage](https://vitest.dev/guide/coverage) measures the share of source lines the unit tests run. The target is 80%. |
|
|
259
233
|
|
|
260
|
-
### Code
|
|
234
|
+
### Code Quality
|
|
261
235
|
|
|
262
|
-
|
|
236
|
+
| Check | Status | What it does |
|
|
237
|
+
| :------------ | :----- | :-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
|
238
|
+
| Code health | ✅ On | [](./code-health-reports/fallow/index.md) [Fallow](https://github.com/fallow-rs/fallow) finds unused code, duplication, complexity and dependency problems. |
|
|
239
|
+
| Code analysis | ✅ On | [](https://sonarcloud.io/summary/new_code?id=dpuse_dpuse-shared) [SonarCloud](https://sonarcloud.io) checks every push for bugs, code smells and vulnerabilities. |
|
|
240
|
+
| Linting | ✅ On | [ESLint](https://eslint.org) checks the code for errors and style problems. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push to `main`. |
|
|
263
241
|
|
|
264
|
-
|
|
242
|
+
### Security Analysis
|
|
265
243
|
|
|
266
|
-
|
|
|
267
|
-
|
|
268
|
-
|
|
|
269
|
-
|
|
|
270
|
-
|
|
|
271
|
-
|Unused exports|0.0%|
|
|
272
|
-
|Duplicated code|0.0%|
|
|
273
|
-
|Functions over the complexity limits|0 of 83|
|
|
274
|
-
|Unused dependencies|0|
|
|
275
|
-
|Circular dependencies|0|
|
|
276
|
-
|Hotspots (complex and often changed)|1|
|
|
244
|
+
| Check | Status | What it does |
|
|
245
|
+
| :-------------- | :----- | :----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
|
246
|
+
| Push protection | ✅ On | [GitHub push protection](https://docs.github.com/en/code-security/secret-scanning/push-protection-for-repositories-and-organizations) blocks pushes that contain credentials. |
|
|
247
|
+
| Static analysis | ✅ On | [](https://github.com/dpuse/dpuse-shared/security/code-scanning) [CodeQL](https://codeql.github.com) scans GitHub Actions and JavaScript/TypeScript for security vulnerabilities, using the extended security queries, on every push and pull request to `main` and weekly. |
|
|
248
|
+
| Secret scanning | ✅ On | [GitHub secret scanning](https://docs.github.com/en/code-security/secret-scanning) detects credentials, such as API keys and tokens, committed to the repository. |
|
|
277
249
|
|
|
278
|
-
###
|
|
250
|
+
### Dependencies
|
|
279
251
|
|
|
280
|
-
|
|
252
|
+
| Check | Status | What it does |
|
|
253
|
+
| :------------------ | :----- | :--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
|
254
|
+
| Vulnerability audit | ✅ On | [npm audit](https://docs.npmjs.com/cli/commands/npm-audit) fails when any dependency has a known vulnerability. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push to `main`. |
|
|
255
|
+
| Supply chain risk | ✅ On | [Socket](https://socket.dev) flags malicious packages, typosquatting and suspicious behaviour that may not yet have a CVE. |
|
|
256
|
+
| Security alerts | ✅ On | [Dependabot](https://docs.github.com/en/code-security/dependabot) alerts when a dependency has a known vulnerability, using the GitHub Advisory Database. |
|
|
257
|
+
| Security updates | ❌ Off | [Dependabot](https://docs.github.com/en/code-security/dependabot) opens pull requests that update vulnerable dependencies. These are handled manually. |
|
|
258
|
+
| Version updates | ❌ Off | [Dependabot](https://docs.github.com/en/code-security/dependabot) opens pull requests for new dependency versions. These are handled manually. |
|
|
281
259
|
|
|
282
260
|
### OpenSSF 🚧
|
|
283
261
|
|
|
284
262
|
[](https://www.bestpractices.dev/projects/14952)
|
|
285
263
|
[](https://scorecard.dev/viewer/?uri=github.com/dpuse/dpuse-shared)
|
|
286
264
|
|
|
287
|
-
This project is working towards the [OpenSSF Best Practices](https://www.bestpractices.dev) Passing badge, a self-certification covering security policy, vulnerability reporting, build processes, code quality, and more. Currently the [OpenSSF Scorecard](https://scorecard.dev
|
|
265
|
+
This project is working towards the [OpenSSF Best Practices](https://www.bestpractices.dev) Passing badge, a self-certification covering security policy, vulnerability reporting, build processes, code quality, and more. Currently the [OpenSSF Scorecard](https://scorecard.dev) provides an independent automated assessment of the project's security practices and is an ongoing area of improvement.
|
|
266
|
+
|
|
267
|
+
> [!NOTE]
|
|
268
|
+
> Apart from the Best Practices badge above, the remaining Scorecard gaps need multi-person review or a pull-request workflow, which this solo-maintained project doesn't use.
|
|
269
|
+
|
|
270
|
+
### Reporting Vulnerabilities
|
|
271
|
+
|
|
272
|
+
Please do not open public GitHub issues for security vulnerabilities. Use [GitHub private vulnerability reporting](https://github.com/dpuse/dpuse-shared/security/advisories/new) instead. See [SECURITY.md](./SECURITY.md) for the full disclosure policy, contact details, and expected response times.
|
|
273
|
+
|
|
274
|
+
<!-- QUALITY_SECURITY_END -->
|
|
275
|
+
|
|
276
|
+
<!-- CONTRIBUTING_LICENSE_START -->
|
|
288
277
|
|
|
289
278
|
## Contributing
|
|
290
279
|
|
|
@@ -298,4 +287,4 @@ This project is licensed under the MIT License, permitting free use, modificatio
|
|
|
298
287
|
|
|
299
288
|
[MIT](./LICENSE) © 2026 Jonathan Terrell
|
|
300
289
|
|
|
301
|
-
<!--
|
|
290
|
+
<!-- CONTRIBUTING_LICENSE_END -->
|