@dpuse/dpuse-shared 0.3.865 → 0.3.867
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +27 -30
- package/dist/dpuse-shared.es.js.map +1 -1
- package/package.json +9 -9
package/README.md
CHANGED
|
@@ -4,11 +4,12 @@
|
|
|
4
4
|
|
|
5
5
|
[](./LICENSE)
|
|
6
6
|
[](https://github.com/dpuse/dpuse-shared/releases/latest)
|
|
7
|
+
[](https://www.npmjs.com/package/@dpuse/dpuse-shared)
|
|
7
8
|
[](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml)
|
|
8
9
|
|
|
9
10
|
[DPUse](https://www.dpuse.app) · [Report a Vulnerability](https://github.com/dpuse/dpuse-shared/security/advisories/new) · [Open an Issue](https://github.com/dpuse/dpuse-shared/issues)
|
|
10
11
|
|
|
11
|
-
Common constants, types and utilities used across
|
|
12
|
+
Common constants, types and utilities used across DPUse projects.
|
|
12
13
|
|
|
13
14
|
## About DPUse
|
|
14
15
|
|
|
@@ -101,7 +102,7 @@ See [API_REFERENCE.md](./API_REFERENCE.md) for the complete API reference, inclu
|
|
|
101
102
|
|
|
102
103
|
## Dependency Licenses
|
|
103
104
|
|
|
104
|
-
License data is updated each time `npm run document` is run, using [license-checker](https://github.com/RSeidelsohn/license-checker-rseidelsohn). The following table lists all production dependencies.
|
|
105
|
+
License data is updated each time `npm run document` is run, using [license-checker](https://github.com/RSeidelsohn/license-checker-rseidelsohn). The following table lists all production dependencies. This project has no build record, so the list is taken from its declared dependencies. These dependencies have been checked and confirmed to use BSD-3-Clause or MIT, all of which allow commercial use. All are used unmodified, so any licence conditions that apply only to modified versions are not triggered. Developers cloning this repository should independently verify development dependencies.
|
|
105
106
|
|
|
106
107
|
| Dependency | Version | License(s) | Document |
|
|
107
108
|
| :--------------------------------------------------------------------- | :-----: | :----------- | :------------------------------------------------------------------ |
|
|
@@ -125,10 +126,10 @@ The dependency tree below lists every package in this project — direct and tra
|
|
|
125
126
|
- **[@tokenizer/inflate](https://github.com/Borewit/tokenizer-inflate)** 0.4.1 — **10 months** ago: 2025-11-18 ⚠️
|
|
126
127
|
- **[debug](https://github.com/debug-js/debug)** 4.4.3 — **12 months** ago: 2025-09-13 ⚠️
|
|
127
128
|
- **[ms](https://github.com/vercel/ms)** 2.1.3 — **69 months** ago: 2020-12-08 ⚠️
|
|
128
|
-
- **[token-types](https://github.com/Borewit/token-types)** 6.1.2 — **
|
|
129
|
+
- **[token-types](https://github.com/Borewit/token-types)** 6.1.2 — **9 months** ago: 2026-01-01 ⚠️
|
|
129
130
|
- **[strtok3](https://github.com/Borewit/strtok3)** 10.3.5 — **6 months** ago: 2026-03-21
|
|
130
131
|
- **[@tokenizer/token](https://github.com/Borewit/tokenizer-token)** 0.3.0 — **62 months** ago: 2021-07-12 ⚠️
|
|
131
|
-
- **[token-types](https://github.com/Borewit/token-types)** 6.1.2 — **
|
|
132
|
+
- **[token-types](https://github.com/Borewit/token-types)** 6.1.2 — **9 months** ago: 2026-01-01 ⚠️
|
|
132
133
|
- **[@borewit/text-codec](https://github.com/Borewit/text-codec)** 0.2.2 — **6 months** ago: 2026-03-11
|
|
133
134
|
- **[@tokenizer/token](https://github.com/Borewit/tokenizer-token)** 0.3.0 — **62 months** ago: 2021-07-12 ⚠️
|
|
134
135
|
- **[ieee754](https://github.com/feross/ieee754)** 1.2.1 — **71 months** ago: 2020-10-27 ⚠️
|
|
@@ -145,22 +146,18 @@ This report is updated with each release, from the bundle the release builds, us
|
|
|
145
146
|
|
|
146
147
|
_Note: Sonda's Vite reports currently exclude CSS files, since Vite does not generate source maps for CSS._
|
|
147
148
|
|
|
148
|
-
| Chunk/Module/File
|
|
149
|
-
|
|
|
150
|
-
| dist/dpuse-shared.es.js
|
|
151
|
-
| src
|
|
152
|
-
|  
|
|
153
|
-
|  
|
|
154
|
-
|  
|
|
155
|
-
|  
|
|
156
|
-
|  
|
|
157
|
-
|  
|
|
158
|
-
|
|
159
|
-
|
|
160
|
-
| cookbookConfig.schema.ts | `░░░░░░░░░░░░░░░░░░░░` 0.5% |
|
|
161
|
-
| schema.ts | `░░░░░░░░░░░░░░░░░░░░` 0.2% |
|
|
162
|
-
| valibot → dist/index.mjs | `████░░░░░░░░░░░░░░░░` 21.2% |
|
|
163
|
-
| (bundler output, whitespace & JSON) | `███░░░░░░░░░░░░░░░░░` 14.5% |
|
|
149
|
+
| Chunk/Module/File | Composition |
|
|
150
|
+
| :-------------------------------------------------------------------------- | :------------------------------------------ |
|
|
151
|
+
| **dist/dpuse-shared.es.js** | 33.1 kB · gzip 8.6 kB · 100.0% of the build |
|
|
152
|
+
| src | `█████████████░░░░░░░` 64.3% · 21.3 kB |
|
|
153
|
+
| ↳ index.ts | `▒▒▒▒▒▒▒▒▒▒▒░░░░░░░░░` 53.7% · 17.8 kB |
|
|
154
|
+
| ↳ connectorConfig.schema.ts | `▒░░░░░░░░░░░░░░░░░░░` 3.6% · 1.2 kB |
|
|
155
|
+
| ↳ componentConfig.schema.ts | `▒░░░░░░░░░░░░░░░░░░░` 2.8% · 936 B |
|
|
156
|
+
| ↳ 7 smaller files | `▒░░░░░░░░░░░░░░░░░░░` 4.3% · 1.4 kB |
|
|
157
|
+
| valibot → dist/index.mjs | `████░░░░░░░░░░░░░░░░` 21.2% · 7.0 kB |
|
|
158
|
+
| (bundler output, whitespace & JSON) | `███░░░░░░░░░░░░░░░░░` 14.5% · 4.8 kB |
|
|
159
|
+
|
|
160
|
+
Bars show each row's share of its output file. ↳ rows are part of the row above.
|
|
164
161
|
|
|
165
162
|
(bundler output, whitespace & JSON) = bytes Sonda can't trace to a source file: whitespace (indentation and line breaks), code the bundler generates (region comments, the combined import/export lines, its small runtime helper and wrappers), and imported JSON such as `config.json`, which the bundler doesn't map. The JSON and the generated code are real bytes that ship; the whitespace mostly disappears once compressed.
|
|
166
163
|
|
|
@@ -176,8 +173,8 @@ This section is updated each time `npm run document` is run. Settings come from
|
|
|
176
173
|
|
|
177
174
|
| Check | Status | What it does |
|
|
178
175
|
| :------------------- | :----- | :----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
|
179
|
-
| Unit tests | ✅ On | [Vitest](https://vitest.dev) runs the unit tests. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push to `main`.
|
|
180
|
-
| Property-based tests | ✅ On | [fast-check](https://fast-check.dev) runs many random inputs per test to find edge cases, alongside the unit tests. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push to `main`.
|
|
176
|
+
| Unit tests | ✅ On | [Vitest](https://vitest.dev) runs the unit tests. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push and pull request to `main`. |
|
|
177
|
+
| Property-based tests | ✅ On | [fast-check](https://fast-check.dev) runs many random inputs per test to find edge cases, alongside the unit tests. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push and pull request to `main`. |
|
|
181
178
|
| Test coverage | ✅ On |  [Vitest's V8 coverage](https://vitest.dev/guide/coverage) measures the share of source lines the unit tests run. The target is 80%. |
|
|
182
179
|
|
|
183
180
|
### Code Quality
|
|
@@ -186,7 +183,7 @@ This section is updated each time `npm run document` is run. Settings come from
|
|
|
186
183
|
| :------------ | :----- | :-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
|
187
184
|
| Code health | ✅ On | [](./code-health-reports/fallow/index.md) [Fallow](https://github.com/fallow-rs/fallow) finds unused code, duplication, complexity and dependency problems. |
|
|
188
185
|
| Code analysis | ✅ On | [](https://sonarcloud.io/summary/new_code?id=dpuse_dpuse-shared) [SonarCloud](https://sonarcloud.io) checks every push for bugs, code smells and vulnerabilities. |
|
|
189
|
-
| Linting | ✅ On | [ESLint](https://eslint.org) checks the code for errors and style problems. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push to `main`.
|
|
186
|
+
| Linting | ✅ On | [ESLint](https://eslint.org) checks the code for errors and style problems. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push and pull request to `main`. |
|
|
190
187
|
|
|
191
188
|
### Security Analysis
|
|
192
189
|
|
|
@@ -198,13 +195,13 @@ This section is updated each time `npm run document` is run. Settings come from
|
|
|
198
195
|
|
|
199
196
|
### Dependencies
|
|
200
197
|
|
|
201
|
-
| Check | Status | What it does
|
|
202
|
-
| :------------------ | :----- |
|
|
203
|
-
| Vulnerability audit | ✅ On | [npm audit](https://docs.npmjs.com/cli/commands/npm-audit) fails when any dependency has a
|
|
204
|
-
| Supply chain risk | ✅ On | [Socket](https://socket.dev) flags malicious packages, typosquatting and suspicious behaviour that may not yet have a CVE.
|
|
205
|
-
| Security alerts | ✅ On | [Dependabot](https://docs.github.com/en/code-security/dependabot) alerts when a dependency has a known vulnerability, using the GitHub Advisory Database.
|
|
206
|
-
| Security updates | ❌ Off | [Dependabot](https://docs.github.com/en/code-security/dependabot) opens pull requests that update vulnerable dependencies. These are handled manually.
|
|
207
|
-
| Version updates | ❌ Off | [Dependabot](https://docs.github.com/en/code-security/dependabot) opens pull requests for new dependency versions. These are handled manually.
|
|
198
|
+
| Check | Status | What it does |
|
|
199
|
+
| :------------------ | :----- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
|
|
200
|
+
| Vulnerability audit | ✅ On | [npm audit](https://docs.npmjs.com/cli/commands/npm-audit) fails when a shipped dependency has any known vulnerability, or a development dependency has a high or critical one. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push and pull request to `main`. |
|
|
201
|
+
| Supply chain risk | ✅ On | [Socket](https://socket.dev) flags malicious packages, typosquatting and suspicious behaviour that may not yet have a CVE. |
|
|
202
|
+
| Security alerts | ✅ On | [Dependabot](https://docs.github.com/en/code-security/dependabot) alerts when a dependency has a known vulnerability, using the GitHub Advisory Database. |
|
|
203
|
+
| Security updates | ❌ Off | [Dependabot](https://docs.github.com/en/code-security/dependabot) opens pull requests that update vulnerable dependencies. These are handled manually. |
|
|
204
|
+
| Version updates | ❌ Off | [Dependabot](https://docs.github.com/en/code-security/dependabot) opens pull requests for new dependency versions. These are handled manually. |
|
|
208
205
|
|
|
209
206
|
### OpenSSF 🚧
|
|
210
207
|
|