@dpuse/dpuse-shared 0.3.865 → 0.3.868
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +29 -60
- package/dist/dpuse-shared.es.js.map +1 -1
- package/dist/shipped-packages.json +6 -0
- package/package.json +9 -9
package/README.md
CHANGED
|
@@ -4,11 +4,12 @@
|
|
|
4
4
|
|
|
5
5
|
[](./LICENSE)
|
|
6
6
|
[](https://github.com/dpuse/dpuse-shared/releases/latest)
|
|
7
|
+
[](https://www.npmjs.com/package/@dpuse/dpuse-shared)
|
|
7
8
|
[](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml)
|
|
8
9
|
|
|
9
10
|
[DPUse](https://www.dpuse.app) · [Report a Vulnerability](https://github.com/dpuse/dpuse-shared/security/advisories/new) · [Open an Issue](https://github.com/dpuse/dpuse-shared/issues)
|
|
10
11
|
|
|
11
|
-
Common constants, types and utilities used across
|
|
12
|
+
Common constants, types and utilities used across DPUse projects.
|
|
12
13
|
|
|
13
14
|
## About DPUse
|
|
14
15
|
|
|
@@ -101,39 +102,11 @@ See [API_REFERENCE.md](./API_REFERENCE.md) for the complete API reference, inclu
|
|
|
101
102
|
|
|
102
103
|
## Dependency Licenses
|
|
103
104
|
|
|
104
|
-
License data is updated each time `npm run document` is run, using [license-checker](https://github.com/RSeidelsohn/license-checker-rseidelsohn). The following table lists
|
|
105
|
-
|
|
106
|
-
| Dependency
|
|
107
|
-
|
|
|
108
|
-
| [
|
|
109
|
-
| [@tokenizer/inflate](https://github.com/Borewit/tokenizer-inflate) | 0.4.1 | MIT | [LICENSE](licenses/downloads/@tokenizer/inflate@0.4.1-LICENSE.txt) |
|
|
110
|
-
| [@tokenizer/token](https://github.com/Borewit/tokenizer-token) | 0.3.0 | MIT | [LICENSE](licenses/downloads/@tokenizer/token@0.3.0-LICENSE.txt) |
|
|
111
|
-
| [debug](https://github.com/debug-js/debug) | 4.4.3 | MIT | [LICENSE](licenses/downloads/debug@4.4.3-LICENSE.txt) |
|
|
112
|
-
| [file-type](https://github.com/sindresorhus/file-type) | 22.1.1 | MIT | [LICENSE](licenses/downloads/file-type@22.1.1-LICENSE.txt) |
|
|
113
|
-
| [ieee754](https://github.com/feross/ieee754) | 1.2.1 | BSD-3-Clause | [LICENSE](licenses/downloads/ieee754@1.2.1-LICENSE.txt) |
|
|
114
|
-
| [ms](https://github.com/vercel/ms) | 2.1.3 | MIT | [LICENSE](licenses/downloads/ms@2.1.3-LICENSE.txt) |
|
|
115
|
-
| [strtok3](https://github.com/Borewit/strtok3) | 10.3.5 | MIT | [LICENSE](licenses/downloads/strtok3@10.3.5-LICENSE.txt) |
|
|
116
|
-
| [token-types](https://github.com/Borewit/token-types) | 6.1.2 | MIT | [LICENSE](licenses/downloads/token-types@6.1.2-LICENSE.txt) |
|
|
117
|
-
| [uint8array-extras](https://github.com/sindresorhus/uint8array-extras) | 1.5.0 | MIT | [LICENSE](licenses/downloads/uint8array-extras@1.5.0-LICENSE.txt) |
|
|
118
|
-
| [valibot](https://github.com/open-circle/valibot) | 1.5.0 | MIT | [LICENSE](licenses/downloads/valibot@1.5.0-LICENSE.txt) |
|
|
119
|
-
|
|
120
|
-
### Dependency Tree
|
|
121
|
-
|
|
122
|
-
The dependency tree below lists every package in this project — direct and transitive — along with its installed version, release date, and update status. Packages flagged ❗ have a newer version available; ⚠️ indicates a package that hasn't been updated in the last 6 months or longer. Neither flag necessarily indicates a problem: we let new releases stabilise before upgrading, and some packages are mature and stable (have limited or no dependencies), so they require no active development.
|
|
123
|
-
|
|
124
|
-
- **[file-type](https://github.com/sindresorhus/file-type)** 22.1.1 — this month: 2026-09-17
|
|
125
|
-
- **[@tokenizer/inflate](https://github.com/Borewit/tokenizer-inflate)** 0.4.1 — **10 months** ago: 2025-11-18 ⚠️
|
|
126
|
-
- **[debug](https://github.com/debug-js/debug)** 4.4.3 — **12 months** ago: 2025-09-13 ⚠️
|
|
127
|
-
- **[ms](https://github.com/vercel/ms)** 2.1.3 — **69 months** ago: 2020-12-08 ⚠️
|
|
128
|
-
- **[token-types](https://github.com/Borewit/token-types)** 6.1.2 — **8 months** ago: 2026-01-01 ⚠️
|
|
129
|
-
- **[strtok3](https://github.com/Borewit/strtok3)** 10.3.5 — **6 months** ago: 2026-03-21
|
|
130
|
-
- **[@tokenizer/token](https://github.com/Borewit/tokenizer-token)** 0.3.0 — **62 months** ago: 2021-07-12 ⚠️
|
|
131
|
-
- **[token-types](https://github.com/Borewit/token-types)** 6.1.2 — **8 months** ago: 2026-01-01 ⚠️
|
|
132
|
-
- **[@borewit/text-codec](https://github.com/Borewit/text-codec)** 0.2.2 — **6 months** ago: 2026-03-11
|
|
133
|
-
- **[@tokenizer/token](https://github.com/Borewit/tokenizer-token)** 0.3.0 — **62 months** ago: 2021-07-12 ⚠️
|
|
134
|
-
- **[ieee754](https://github.com/feross/ieee754)** 1.2.1 — **71 months** ago: 2020-10-27 ⚠️
|
|
135
|
-
- **[uint8array-extras](https://github.com/sindresorhus/uint8array-extras)** 1.5.0 — **13 months** ago: 2025-08-22 ⚠️ → **latest**: 1.6.0 — this month: 2026-09-26 ❗
|
|
136
|
-
- **[valibot](https://github.com/open-circle/valibot)** 1.5.0 — this month: 2026-09-09
|
|
105
|
+
License data is updated each time `npm run document` is run, using [license-checker](https://github.com/RSeidelsohn/license-checker-rseidelsohn). The following table lists every package whose code, styles or assets are included in this project's build, as recorded by the build itself. Modules loaded at run time are not included; each documents its own. These dependencies have been checked and confirmed to use BSD-3-Clause or MIT, all of which allow commercial use. All are used unmodified, so any licence conditions that apply only to modified versions are not triggered. Developers cloning this repository should independently verify development dependencies.
|
|
106
|
+
|
|
107
|
+
| Dependency | Version | Release | License(s) | Document |
|
|
108
|
+
| :------------------------------------------------ | :-----: | :--------------------- | :--------- | :------------------------------------------------------ |
|
|
109
|
+
| [valibot](https://github.com/open-circle/valibot) | 1.5.0 | this month: 2026-09-09 | MIT | [LICENSE](licenses/downloads/valibot@1.5.0-LICENSE.txt) |
|
|
137
110
|
|
|
138
111
|
<!-- DEPENDENCY_LICENSES_END -->
|
|
139
112
|
|
|
@@ -145,22 +118,18 @@ This report is updated with each release, from the bundle the release builds, us
|
|
|
145
118
|
|
|
146
119
|
_Note: Sonda's Vite reports currently exclude CSS files, since Vite does not generate source maps for CSS._
|
|
147
120
|
|
|
148
|
-
| Chunk/Module/File
|
|
149
|
-
|
|
|
150
|
-
| dist/dpuse-shared.es.js
|
|
151
|
-
| src
|
|
152
|
-
|  
|
|
153
|
-
|  
|
|
154
|
-
|  
|
|
155
|
-
|  
|
|
156
|
-
|  
|
|
157
|
-
|  
|
|
158
|
-
|
|
159
|
-
|
|
160
|
-
| cookbookConfig.schema.ts | `░░░░░░░░░░░░░░░░░░░░` 0.5% |
|
|
161
|
-
| schema.ts | `░░░░░░░░░░░░░░░░░░░░` 0.2% |
|
|
162
|
-
| valibot → dist/index.mjs | `████░░░░░░░░░░░░░░░░` 21.2% |
|
|
163
|
-
| (bundler output, whitespace & JSON) | `███░░░░░░░░░░░░░░░░░` 14.5% |
|
|
121
|
+
| Chunk/Module/File | Composition |
|
|
122
|
+
| :-------------------------------------------------------------------------- | :------------------------------------------ |
|
|
123
|
+
| **dist/dpuse-shared.es.js** | 33.1 kB · gzip 8.6 kB · 100.0% of the build |
|
|
124
|
+
| src | `█████████████░░░░░░░` 64.3% · 21.3 kB |
|
|
125
|
+
| ↳ index.ts | `▒▒▒▒▒▒▒▒▒▒▒░░░░░░░░░` 53.7% · 17.8 kB |
|
|
126
|
+
| ↳ connectorConfig.schema.ts | `▒░░░░░░░░░░░░░░░░░░░` 3.6% · 1.2 kB |
|
|
127
|
+
| ↳ componentConfig.schema.ts | `▒░░░░░░░░░░░░░░░░░░░` 2.8% · 936 B |
|
|
128
|
+
| ↳ 7 smaller files | `▒░░░░░░░░░░░░░░░░░░░` 4.3% · 1.4 kB |
|
|
129
|
+
| valibot → dist/index.mjs | `████░░░░░░░░░░░░░░░░` 21.2% · 7.0 kB |
|
|
130
|
+
| (bundler output, whitespace & JSON) | `███░░░░░░░░░░░░░░░░░` 14.5% · 4.8 kB |
|
|
131
|
+
|
|
132
|
+
Bars show each row's share of its output file. ↳ rows are part of the row above.
|
|
164
133
|
|
|
165
134
|
(bundler output, whitespace & JSON) = bytes Sonda can't trace to a source file: whitespace (indentation and line breaks), code the bundler generates (region comments, the combined import/export lines, its small runtime helper and wrappers), and imported JSON such as `config.json`, which the bundler doesn't map. The JSON and the generated code are real bytes that ship; the whitespace mostly disappears once compressed.
|
|
166
135
|
|
|
@@ -176,8 +145,8 @@ This section is updated each time `npm run document` is run. Settings come from
|
|
|
176
145
|
|
|
177
146
|
| Check | Status | What it does |
|
|
178
147
|
| :------------------- | :----- | :----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
|
179
|
-
| Unit tests | ✅ On | [Vitest](https://vitest.dev) runs the unit tests. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push to `main`.
|
|
180
|
-
| Property-based tests | ✅ On | [fast-check](https://fast-check.dev) runs many random inputs per test to find edge cases, alongside the unit tests. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push to `main`.
|
|
148
|
+
| Unit tests | ✅ On | [Vitest](https://vitest.dev) runs the unit tests. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push and pull request to `main`. |
|
|
149
|
+
| Property-based tests | ✅ On | [fast-check](https://fast-check.dev) runs many random inputs per test to find edge cases, alongside the unit tests. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push and pull request to `main`. |
|
|
181
150
|
| Test coverage | ✅ On |  [Vitest's V8 coverage](https://vitest.dev/guide/coverage) measures the share of source lines the unit tests run. The target is 80%. |
|
|
182
151
|
|
|
183
152
|
### Code Quality
|
|
@@ -186,7 +155,7 @@ This section is updated each time `npm run document` is run. Settings come from
|
|
|
186
155
|
| :------------ | :----- | :-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
|
187
156
|
| Code health | ✅ On | [](./code-health-reports/fallow/index.md) [Fallow](https://github.com/fallow-rs/fallow) finds unused code, duplication, complexity and dependency problems. |
|
|
188
157
|
| Code analysis | ✅ On | [](https://sonarcloud.io/summary/new_code?id=dpuse_dpuse-shared) [SonarCloud](https://sonarcloud.io) checks every push for bugs, code smells and vulnerabilities. |
|
|
189
|
-
| Linting | ✅ On | [ESLint](https://eslint.org) checks the code for errors and style problems. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push to `main`.
|
|
158
|
+
| Linting | ✅ On | [ESLint](https://eslint.org) checks the code for errors and style problems. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push and pull request to `main`. |
|
|
190
159
|
|
|
191
160
|
### Security Analysis
|
|
192
161
|
|
|
@@ -198,13 +167,13 @@ This section is updated each time `npm run document` is run. Settings come from
|
|
|
198
167
|
|
|
199
168
|
### Dependencies
|
|
200
169
|
|
|
201
|
-
| Check | Status | What it does
|
|
202
|
-
| :------------------ | :----- |
|
|
203
|
-
| Vulnerability audit | ✅ On | [npm audit](https://docs.npmjs.com/cli/commands/npm-audit) fails when any dependency has a
|
|
204
|
-
| Supply chain risk | ✅ On | [Socket](https://socket.dev) flags malicious packages, typosquatting and suspicious behaviour that may not yet have a CVE.
|
|
205
|
-
| Security alerts | ✅ On | [Dependabot](https://docs.github.com/en/code-security/dependabot) alerts when a dependency has a known vulnerability, using the GitHub Advisory Database.
|
|
206
|
-
| Security updates | ❌ Off | [Dependabot](https://docs.github.com/en/code-security/dependabot) opens pull requests that update vulnerable dependencies. These are handled manually.
|
|
207
|
-
| Version updates | ❌ Off | [Dependabot](https://docs.github.com/en/code-security/dependabot) opens pull requests for new dependency versions. These are handled manually.
|
|
170
|
+
| Check | Status | What it does |
|
|
171
|
+
| :------------------ | :----- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
|
|
172
|
+
| Vulnerability audit | ✅ On | [npm audit](https://docs.npmjs.com/cli/commands/npm-audit) fails when a shipped dependency has any known vulnerability, or a development dependency has a high or critical one. Part of the [CI workflow](https://github.com/dpuse/dpuse-shared/actions/workflows/ci.yml) on every push and pull request to `main`. |
|
|
173
|
+
| Supply chain risk | ✅ On | [Socket](https://socket.dev) flags malicious packages, typosquatting and suspicious behaviour that may not yet have a CVE. |
|
|
174
|
+
| Security alerts | ✅ On | [Dependabot](https://docs.github.com/en/code-security/dependabot) alerts when a dependency has a known vulnerability, using the GitHub Advisory Database. |
|
|
175
|
+
| Security updates | ❌ Off | [Dependabot](https://docs.github.com/en/code-security/dependabot) opens pull requests that update vulnerable dependencies. These are handled manually. |
|
|
176
|
+
| Version updates | ❌ Off | [Dependabot](https://docs.github.com/en/code-security/dependabot) opens pull requests for new dependency versions. These are handled manually. |
|
|
208
177
|
|
|
209
178
|
### OpenSSF 🚧
|
|
210
179
|
|