@dpuse/dpuse-shared 0.3.863 → 0.3.867

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (46) hide show
  1. package/README.md +30 -84
  2. package/dist/dpuse-shared.es.js +1473 -0
  3. package/dist/dpuse-shared.es.js.map +1 -0
  4. package/dist/types/src/index.d.ts +24 -0
  5. package/package.json +10 -110
  6. package/dist/componentConfig.schema-DT3mO5rS.js +0 -416
  7. package/dist/componentConfig.schema-DT3mO5rS.js.map +0 -1
  8. package/dist/dpuse-shared-component.es.js +0 -53
  9. package/dist/dpuse-shared-component.es.js.map +0 -1
  10. package/dist/dpuse-shared-componentConnection.es.js +0 -0
  11. package/dist/dpuse-shared-componentContext.es.js +0 -0
  12. package/dist/dpuse-shared-componentContextModel.es.js +0 -0
  13. package/dist/dpuse-shared-componentContextModelDimension.es.js +0 -0
  14. package/dist/dpuse-shared-componentContextModelDimensionHierarchy.es.js +0 -0
  15. package/dist/dpuse-shared-componentContextModelEntity.es.js +0 -0
  16. package/dist/dpuse-shared-componentContextModelEntityDataItem.es.js +0 -0
  17. package/dist/dpuse-shared-componentContextModelEntityEvent.es.js +0 -0
  18. package/dist/dpuse-shared-componentContextModelEntityPrimaryMeasure.es.js +0 -0
  19. package/dist/dpuse-shared-componentContextModelSecondaryMeasure.es.js +0 -0
  20. package/dist/dpuse-shared-componentDataView.es.js +0 -18
  21. package/dist/dpuse-shared-componentDataView.es.js.map +0 -1
  22. package/dist/dpuse-shared-componentEventQuery.es.js +0 -0
  23. package/dist/dpuse-shared-componentModule.es.js +0 -0
  24. package/dist/dpuse-shared-componentModuleConnector.es.js +0 -182
  25. package/dist/dpuse-shared-componentModuleConnector.es.js.map +0 -1
  26. package/dist/dpuse-shared-componentModuleCookbook.es.js +0 -11
  27. package/dist/dpuse-shared-componentModuleCookbook.es.js.map +0 -1
  28. package/dist/dpuse-shared-componentModuleEngine.es.js +0 -0
  29. package/dist/dpuse-shared-componentModulePresenter.es.js +0 -15
  30. package/dist/dpuse-shared-componentModulePresenter.es.js.map +0 -1
  31. package/dist/dpuse-shared-componentModuleTool.es.js +0 -29
  32. package/dist/dpuse-shared-componentModuleTool.es.js.map +0 -1
  33. package/dist/dpuse-shared-componentPresentation.es.js +0 -0
  34. package/dist/dpuse-shared-componentRecipe.es.js +0 -0
  35. package/dist/dpuse-shared-encoding.es.js +0 -467
  36. package/dist/dpuse-shared-encoding.es.js.map +0 -1
  37. package/dist/dpuse-shared-errors.es.js +0 -150
  38. package/dist/dpuse-shared-errors.es.js.map +0 -1
  39. package/dist/dpuse-shared-locale.es.js +0 -28
  40. package/dist/dpuse-shared-locale.es.js.map +0 -1
  41. package/dist/dpuse-shared-utilities.es.js +0 -109
  42. package/dist/dpuse-shared-utilities.es.js.map +0 -1
  43. package/dist/label-DexpXrnC.js +0 -19
  44. package/dist/label-DexpXrnC.js.map +0 -1
  45. package/dist/moduleConfig.schema-aYmFWSrn.js +0 -22
  46. package/dist/moduleConfig.schema-aYmFWSrn.js.map +0 -1
package/README.md CHANGED
@@ -4,11 +4,12 @@
4
4
 
5
5
  [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](./LICENSE)
6
6
  [![DPUse version](https://img.shields.io/github/v/release/dpuse/dpuse-shared?color=f6821f&label=DPUse)](https://github.com/dpuse/dpuse-shared/releases/latest)
7
+ [![npm version](https://img.shields.io/npm/v/@dpuse/dpuse-shared?color=cb3837&label=npm)](https://www.npmjs.com/package/@dpuse/dpuse-shared)
7
8
  [![CI](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml/badge.svg)](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml)
8
9
 
9
10
  [DPUse](https://www.dpuse.app) · [Report a Vulnerability](https://github.com/dpuse/dpuse-shared/security/advisories/new) · [Open an Issue](https://github.com/dpuse/dpuse-shared/issues)
10
11
 
11
- Common constants, types and utilities used across all DPUse projects.
12
+ Common constants, types and utilities used across DPUse projects.
12
13
 
13
14
  ## About DPUse
14
15
 
@@ -56,13 +57,10 @@ This repository is managed using the common set of actions provided by [@dpuse/d
56
57
 
57
58
  ### Example
58
59
 
59
- This package uses [sub-path exports](https://nodejs.org/api/packages.html#subpath-exports). Import only the entry points you need:
60
+ Everything is imported from the package itself. Bundlers keep only what you use:
60
61
 
61
62
  ```ts
62
- import { getComponentStatus } from '@dpuse/dpuse-shared/component';
63
- import type { ConnectorConfig } from '@dpuse/dpuse-shared/component/module/connector';
64
- import { ConnectorError, serialiseError } from '@dpuse/dpuse-shared/errors';
65
- import { formatNumberAsDuration } from '@dpuse/dpuse-shared/utilities';
63
+ import { ConnectorError, type ConnectorConfig, formatNumberAsDuration, getComponentStatus, serialiseError } from '@dpuse/dpuse-shared';
66
64
 
67
65
  try {
68
66
  // The locator argument follows the convention 'project.file.function'
@@ -98,13 +96,13 @@ OData-to-internal type conversion, file path name and extension extraction, numb
98
96
 
99
97
  ## API Reference
100
98
 
101
- See [API_REFERENCE.md](./API_REFERENCE.md) for the complete API reference, including all exported schemas, types, classes, constants, and actions for each sub-path entry point.
99
+ See [API_REFERENCE.md](./API_REFERENCE.md) for the complete API reference, including all exported schemas, types, classes, constants, and actions, grouped by topic.
102
100
 
103
101
  <!-- DEPENDENCY_LICENSES_START -->
104
102
 
105
103
  ## Dependency Licenses
106
104
 
107
- License data is updated each time `npm run document` is run, using [license-checker](https://github.com/RSeidelsohn/license-checker-rseidelsohn). The following table lists all production dependencies. These dependencies (including transitive ones) have been checked and confirmed to use BSD-3-Clause or MIT — all permissive, commercially-friendly licenses. Users of the uploaded library are covered by these checks; developers cloning this repository should independently verify development dependencies.
105
+ License data is updated each time `npm run document` is run, using [license-checker](https://github.com/RSeidelsohn/license-checker-rseidelsohn). The following table lists all production dependencies. This project has no build record, so the list is taken from its declared dependencies. These dependencies have been checked and confirmed to use BSD-3-Clause or MIT, all of which allow commercial use. All are used unmodified, so any licence conditions that apply only to modified versions are not triggered. Developers cloning this repository should independently verify development dependencies.
108
106
 
109
107
  | Dependency | Version | License(s) | Document |
110
108
  | :--------------------------------------------------------------------- | :-----: | :----------- | :------------------------------------------------------------------ |
@@ -128,10 +126,10 @@ The dependency tree below lists every package in this project — direct and tra
128
126
  - **[@tokenizer/inflate](https://github.com/Borewit/tokenizer-inflate)** 0.4.1 — **10 months** ago: 2025-11-18 ⚠️
129
127
  - **[debug](https://github.com/debug-js/debug)** 4.4.3 — **12 months** ago: 2025-09-13 ⚠️
130
128
  - **[ms](https://github.com/vercel/ms)** 2.1.3 — **69 months** ago: 2020-12-08 ⚠️
131
- - **[token-types](https://github.com/Borewit/token-types)** 6.1.2 — **8 months** ago: 2026-01-01 ⚠️
129
+ - **[token-types](https://github.com/Borewit/token-types)** 6.1.2 — **9 months** ago: 2026-01-01 ⚠️
132
130
  - **[strtok3](https://github.com/Borewit/strtok3)** 10.3.5 — **6 months** ago: 2026-03-21
133
131
  - **[@tokenizer/token](https://github.com/Borewit/tokenizer-token)** 0.3.0 — **62 months** ago: 2021-07-12 ⚠️
134
- - **[token-types](https://github.com/Borewit/token-types)** 6.1.2 — **8 months** ago: 2026-01-01 ⚠️
132
+ - **[token-types](https://github.com/Borewit/token-types)** 6.1.2 — **9 months** ago: 2026-01-01 ⚠️
135
133
  - **[@borewit/text-codec](https://github.com/Borewit/text-codec)** 0.2.2 — **6 months** ago: 2026-03-11
136
134
  - **[@tokenizer/token](https://github.com/Borewit/tokenizer-token)** 0.3.0 — **62 months** ago: 2021-07-12 ⚠️
137
135
  - **[ieee754](https://github.com/feross/ieee754)** 1.2.1 — **71 months** ago: 2020-10-27 ⚠️
@@ -148,70 +146,18 @@ This report is updated with each release, from the bundle the release builds, us
148
146
 
149
147
  _Note: Sonda's Vite reports currently exclude CSS files, since Vite does not generate source maps for CSS._
150
148
 
151
- | Chunk/Module/File | Composition |
152
- | :------------------------------------------------------------------------ | :--------------------------- |
153
- | dist/componentConfig.schema-DT3mO5rS.js | 10.2 kB · gzip 2.6 kB |
154
- | &nbsp;&nbsp;&nbsp;&nbsp;valibot → dist/index.mjs | `████░░░░░░░░░░░░░░░░` 20.7% |
155
- | &nbsp;&nbsp;&nbsp;&nbsp;(bundler output, whitespace & JSON) | `█░░░░░░░░░░░░░░░░░░░` 5.3% |
156
- | &nbsp;&nbsp;&nbsp;&nbsp;src | `█░░░░░░░░░░░░░░░░░░░` 4.2% |
157
- | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;componentConfig.schema.ts | `█░░░░░░░░░░░░░░░░░░░` 2.7% |
158
- | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;locale.schema.ts | `░░░░░░░░░░░░░░░░░░░░` 0.8% |
159
- | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;baseConfig.schema.ts | `░░░░░░░░░░░░░░░░░░░░` 0.5% |
160
- | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;schema.ts | `░░░░░░░░░░░░░░░░░░░░` 0.2% |
161
- | dist/dpuse-shared-encoding.es.js | 7.4 kB · gzip 1.5 kB |
162
- | &nbsp;&nbsp;&nbsp;&nbsp;src → index.ts | `████░░░░░░░░░░░░░░░░` 18.9% |
163
- | &nbsp;&nbsp;&nbsp;&nbsp;(bundler output, whitespace & JSON) | `█░░░░░░░░░░░░░░░░░░░` 2.9% |
164
- | dist/dpuse-shared-errors.es.js | 4.6 kB · gzip 1.7 kB |
165
- | &nbsp;&nbsp;&nbsp;&nbsp;src → index.ts | `██░░░░░░░░░░░░░░░░░░` 12.3% |
166
- | &nbsp;&nbsp;&nbsp;&nbsp;(bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 1.3% |
167
- | dist/dpuse-shared-componentModuleConnector.es.js | 3.6 kB · gzip 1.3 kB |
168
- | &nbsp;&nbsp;&nbsp;&nbsp;src | `██░░░░░░░░░░░░░░░░░░` 8.4% |
169
- | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;index.ts | `█░░░░░░░░░░░░░░░░░░░` 6.1% |
170
- | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;connectorConfig.schema.ts | `░░░░░░░░░░░░░░░░░░░░` 2.3% |
171
- | &nbsp;&nbsp;&nbsp;&nbsp;(bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 2.1% |
172
- | dist/dpuse-shared-utilities.es.js | 3.5 kB · gzip 1.3 kB |
173
- | &nbsp;&nbsp;&nbsp;&nbsp;src → index.ts | `██░░░░░░░░░░░░░░░░░░` 8.9% |
174
- | &nbsp;&nbsp;&nbsp;&nbsp;(bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 1.4% |
175
- | dist/dpuse-shared-locale.es.js | 856 B · gzip 386 B |
176
- | &nbsp;&nbsp;&nbsp;&nbsp;src → index.ts | `░░░░░░░░░░░░░░░░░░░░` 1.6% |
177
- | &nbsp;&nbsp;&nbsp;&nbsp;(bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 0.9% |
178
- | dist/dpuse-shared-component.es.js | 834 B · gzip 415 B |
179
- | &nbsp;&nbsp;&nbsp;&nbsp;src → index.ts | `░░░░░░░░░░░░░░░░░░░░` 1.6% |
180
- | &nbsp;&nbsp;&nbsp;&nbsp;(bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 0.9% |
181
- | dist/dpuse-shared-componentModuleTool.es.js | 784 B · gzip 450 B |
182
- | &nbsp;&nbsp;&nbsp;&nbsp;src → index.ts | `░░░░░░░░░░░░░░░░░░░░` 1.7% |
183
- | &nbsp;&nbsp;&nbsp;&nbsp;(bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 0.6% |
184
- | dist/dpuse-shared-componentDataView.es.js | 701 B · gzip 355 B |
185
- | &nbsp;&nbsp;&nbsp;&nbsp;src → index.ts | `░░░░░░░░░░░░░░░░░░░░` 1.6% |
186
- | &nbsp;&nbsp;&nbsp;&nbsp;(bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 0.4% |
187
- | dist/dpuse-shared-componentModulePresenter.es.js | 411 B · gzip 269 B |
188
- | &nbsp;&nbsp;&nbsp;&nbsp;(bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 0.8% |
189
- | &nbsp;&nbsp;&nbsp;&nbsp;src → presenterConfig.schema.ts | `░░░░░░░░░░░░░░░░░░░░` 0.4% |
190
- | dist/moduleConfig.schema-aYmFWSrn.js | 405 B · gzip 274 B |
191
- | &nbsp;&nbsp;&nbsp;&nbsp;src → moduleConfig.schema.ts | `░░░░░░░░░░░░░░░░░░░░` 0.6% |
192
- | &nbsp;&nbsp;&nbsp;&nbsp;(bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 0.6% |
193
- | dist/dpuse-shared-componentModuleCookbook.es.js | 370 B · gzip 248 B |
194
- | &nbsp;&nbsp;&nbsp;&nbsp;(bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 0.8% |
195
- | &nbsp;&nbsp;&nbsp;&nbsp;src → cookbookConfig.schema.ts | `░░░░░░░░░░░░░░░░░░░░` 0.3% |
196
- | dist/label-DexpXrnC.js | 361 B · gzip 251 B |
197
- | &nbsp;&nbsp;&nbsp;&nbsp;src → label.ts | `░░░░░░░░░░░░░░░░░░░░` 0.8% |
198
- | &nbsp;&nbsp;&nbsp;&nbsp;(bundler output, whitespace & JSON) | `░░░░░░░░░░░░░░░░░░░░` 0.3% |
199
- | dist/dpuse-shared-componentConnection.es.js | 0 B · gzip 20 B |
200
- | dist/dpuse-shared-componentContext.es.js | 0 B · gzip 20 B |
201
- | dist/dpuse-shared-componentContextModel.es.js | 0 B · gzip 20 B |
202
- | dist/dpuse-shared-componentContextModelDimension.es.js | 0 B · gzip 20 B |
203
- | dist/dpuse-shared-componentContextModelDimensionHierarchy.es.js | 0 B · gzip 20 B |
204
- | dist/dpuse-shared-componentContextModelEntity.es.js | 0 B · gzip 20 B |
205
- | dist/dpuse-shared-componentContextModelEntityDataItem.es.js | 0 B · gzip 20 B |
206
- | dist/dpuse-shared-componentContextModelEntityEvent.es.js | 0 B · gzip 20 B |
207
- | dist/dpuse-shared-componentContextModelEntityPrimaryMeasure.es.js | 0 B · gzip 20 B |
208
- | dist/dpuse-shared-componentContextModelSecondaryMeasure.es.js | 0 B · gzip 20 B |
209
- | dist/dpuse-shared-componentEventQuery.es.js | 0 B · gzip 20 B |
210
- | dist/dpuse-shared-componentModule.es.js | 0 B · gzip 20 B |
211
- | dist/dpuse-shared-componentModuleEngine.es.js | 0 B · gzip 20 B |
212
- | dist/dpuse-shared-componentPresentation.es.js | 0 B · gzip 20 B |
213
- | dist/dpuse-shared-componentRecipe.es.js | 0 B · gzip 20 B |
214
- | dist/dpuse-shared.es.js | 0 B · gzip 20 B |
149
+ | Chunk/Module/File | Composition |
150
+ | :-------------------------------------------------------------------------- | :------------------------------------------ |
151
+ | **dist/dpuse-shared.es.js** | 33.1 kB · gzip 8.6 kB · 100.0% of the build |
152
+ | &nbsp;&nbsp;&nbsp;&nbsp;src | `█████████████░░░░░░░` 64.3% · 21.3 kB |
153
+ | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;↳ index.ts | `▒▒▒▒▒▒▒▒▒▒▒░░░░░░░░░` 53.7% · 17.8 kB |
154
+ | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;↳ connectorConfig.schema.ts | `▒░░░░░░░░░░░░░░░░░░░` 3.6% · 1.2 kB |
155
+ | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;↳ componentConfig.schema.ts | `▒░░░░░░░░░░░░░░░░░░░` 2.8% · 936 B |
156
+ | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;↳ 7 smaller files | `▒░░░░░░░░░░░░░░░░░░░` 4.3% · 1.4 kB |
157
+ | &nbsp;&nbsp;&nbsp;&nbsp;valibot → dist/index.mjs | `████░░░░░░░░░░░░░░░░` 21.2% · 7.0 kB |
158
+ | &nbsp;&nbsp;&nbsp;&nbsp;(bundler output, whitespace & JSON) | `███░░░░░░░░░░░░░░░░░` 14.5% · 4.8 kB |
159
+
160
+ Bars show each row's share of its output file. ↳ rows are part of the row above.
215
161
 
216
162
  (bundler output, whitespace & JSON) = bytes Sonda can't trace to a source file: whitespace (indentation and line breaks), code the bundler generates (region comments, the combined import/export lines, its small runtime helper and wrappers), and imported JSON such as `config.json`, which the bundler doesn't map. The JSON and the generated code are real bytes that ship; the whitespace mostly disappears once compressed.
217
163
 
@@ -227,8 +173,8 @@ This section is updated each time `npm run document` is run. Settings come from
227
173
 
228
174
  | Check | Status | What it does |
229
175
  | :------------------- | :----- | :----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
230
- | Unit tests | ✅ On | [Vitest](https://vitest.dev) runs the unit tests. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push to `main`. |
231
- | Property-based tests | ✅ On | [fast-check](https://fast-check.dev) runs many random inputs per test to find edge cases, alongside the unit tests. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push to `main`. |
176
+ | Unit tests | ✅ On | [Vitest](https://vitest.dev) runs the unit tests. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push and pull request to `main`. |
177
+ | Property-based tests | ✅ On | [fast-check](https://fast-check.dev) runs many random inputs per test to find edge cases, alongside the unit tests. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push and pull request to `main`. |
232
178
  | Test coverage | ✅ On | ![Coverage](https://img.shields.io/endpoint?url=https%3A%2F%2Fraw.githubusercontent.com%2Fdpuse%2Fdpuse-shared%2Fmain%2Fcode-health-reports%2Fvitest%2Fbadge.json) [Vitest's V8 coverage](https://vitest.dev/guide/coverage) measures the share of source lines the unit tests run. The target is 80%. |
233
179
 
234
180
  ### Code Quality
@@ -237,7 +183,7 @@ This section is updated each time `npm run document` is run. Settings come from
237
183
  | :------------ | :----- | :-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
238
184
  | Code health | ✅ On | [![Fallow code health](https://img.shields.io/endpoint?url=https%3A%2F%2Fraw.githubusercontent.com%2Fdpuse%2Fdpuse-shared%2Fmain%2Fcode-health-reports%2Ffallow%2Fbadge.json)](./code-health-reports/fallow/index.md) [Fallow](https://github.com/fallow-rs/fallow) finds unused code, duplication, complexity and dependency problems. |
239
185
  | Code analysis | ✅ On | [![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=dpuse_dpuse-shared&metric=alert_status)](https://sonarcloud.io/summary/new_code?id=dpuse_dpuse-shared) [SonarCloud](https://sonarcloud.io) checks every push for bugs, code smells and vulnerabilities. |
240
- | Linting | ✅ On | [ESLint](https://eslint.org) checks the code for errors and style problems. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push to `main`. |
186
+ | Linting | ✅ On | [ESLint](https://eslint.org) checks the code for errors and style problems. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push and pull request to `main`. |
241
187
 
242
188
  ### Security Analysis
243
189
 
@@ -249,13 +195,13 @@ This section is updated each time `npm run document` is run. Settings come from
249
195
 
250
196
  ### Dependencies
251
197
 
252
- | Check | Status | What it does |
253
- | :------------------ | :----- | :--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
254
- | Vulnerability audit | ✅ On | [npm audit](https://docs.npmjs.com/cli/commands/npm-audit) fails when any dependency has a known vulnerability. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push to `main`. |
255
- | Supply chain risk | ✅ On | [Socket](https://socket.dev) flags malicious packages, typosquatting and suspicious behaviour that may not yet have a CVE. |
256
- | Security alerts | ✅ On | [Dependabot](https://docs.github.com/en/code-security/dependabot) alerts when a dependency has a known vulnerability, using the GitHub Advisory Database. |
257
- | Security updates | ❌ Off | [Dependabot](https://docs.github.com/en/code-security/dependabot) opens pull requests that update vulnerable dependencies. These are handled manually. |
258
- | Version updates | ❌ Off | [Dependabot](https://docs.github.com/en/code-security/dependabot) opens pull requests for new dependency versions. These are handled manually. |
198
+ | Check | Status | What it does |
199
+ | :------------------ | :----- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
200
+ | Vulnerability audit | ✅ On | [npm audit](https://docs.npmjs.com/cli/commands/npm-audit) fails when a shipped dependency has any known vulnerability, or a development dependency has a high or critical one. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push and pull request to `main`. |
201
+ | Supply chain risk | ✅ On | [Socket](https://socket.dev) flags malicious packages, typosquatting and suspicious behaviour that may not yet have a CVE. |
202
+ | Security alerts | ✅ On | [Dependabot](https://docs.github.com/en/code-security/dependabot) alerts when a dependency has a known vulnerability, using the GitHub Advisory Database. |
203
+ | Security updates | ❌ Off | [Dependabot](https://docs.github.com/en/code-security/dependabot) opens pull requests that update vulnerable dependencies. These are handled manually. |
204
+ | Version updates | ❌ Off | [Dependabot](https://docs.github.com/en/code-security/dependabot) opens pull requests for new dependency versions. These are handled manually. |
259
205
 
260
206
  ### OpenSSF 🚧
261
207