@dpuse/dpuse-tool-adaltas-csv-parser 0.0.158 → 0.0.160

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -8,14 +8,20 @@
8
8
  [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](./LICENSE)
9
9
  [![DPUse version](https://img.shields.io/github/v/release/dpuse/dpuse-tool-adaltas-csv-parser?color=f6821f&label=DPUse)](https://github.com/dpuse/dpuse-tool-adaltas-csv-parser/releases/latest)
10
10
  [![CI](https://github.com/dpuse/dpuse-tool-adaltas-csv-parser/actions/workflows/ci.yml/badge.svg)](https://github.com/dpuse/dpuse-tool-adaltas-csv-parser/actions/workflows/ci.yml)
11
- [![CodeQL](https://github.com/dpuse/dpuse-tool-adaltas-csv-parser/actions/workflows/codeql.yml/badge.svg)](https://github.com/dpuse/dpuse-tool-adaltas-csv-parser/actions/workflows/codeql.yml)
12
- [![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=dpuse_dpuse-tool-adaltas-csv-parser&metric=alert_status)](https://sonarcloud.io/summary/new_code?id=dpuse_dpuse-tool-adaltas-csv-parser)
13
11
 
14
- [Documentation](https://www.dpuse.app) · [Report a Vulnerability](https://github.com/dpuse/dpuse-tool-adaltas-csv-parser/security/advisories/new) · [Open an Issue](https://github.com/dpuse/dpuse-tool-adaltas-csv-parser/issues)
12
+ [DPUse](https://www.dpuse.app) · [Report a Vulnerability](https://github.com/dpuse/dpuse-tool-adaltas-csv-parser/security/advisories/new) · [Open an Issue](https://github.com/dpuse/dpuse-tool-adaltas-csv-parser/issues)
15
13
 
16
14
  ## About DPUse
17
15
 
18
- DPUse (Data Positioning & Use) is an in-browser application that positions your data for use through three core activities: sourcing, contextualising, and publishing. **Sourcing** uses a library of [Connectors](https://www.dpuse.app) to establish [Connections](https://www.dpuse.app) to applications, databases, file stores, and curated datasets; these connections are subsequently used to configure structured [Data Views](https://www.dpuse.app) from the underlying sources. **Contextualising** extracts chronological events from those [Data Views](https://www.dpuse.app) and maps them into comprehensive [Context Models](https://www.dpuse.app). This provides the DPUse Engine with the structural framework required to generate deterministic transactions, facts, or observations. **Publishing** employs a library of [Presenters](https://www.dpuse.app) to render standard [Presentations](https://www.dpuse.app) immediately using the contextualised data; additionally, [Cookbooks](https://www.dpuse.app) of [Recipes](https://www.dpuse.app) allow you to build Data Apps using your preferred tools.
16
+ DPUse (Data Positioning & Use) is an in-browser application that positions your data for use through three core activities: sourcing, contextualising, and publishing.
17
+
18
+ **Sourcing** uses a library of [Connectors](https://www.dpuse.app/connectors) to establish [Connections](https://www.dpuse.app) to applications, databases, file stores, and curated datasets; these connections are subsequently used to configure structured [Data Views](https://www.dpuse.app) from the underlying sources.
19
+
20
+ **Contextualising** extracts chronological events from those [Data Views](https://www.dpuse.app) and maps them into comprehensive [Context Models](https://www.dpuse.app). This gives the DPUse Engine the structural framework needed to generate deterministic transactions, facts, or observations.
21
+
22
+ **Publishing** uses a library of [Presenters](https://www.dpuse.app) to render standard [Presentations](https://www.dpuse.app) immediately using the contextualised data; additionally, [Cookbooks](https://www.dpuse.app) of [Recipes](https://www.dpuse.app) let you build Data Apps using your preferred tools.
23
+
24
+ In addition, DPUse provides [Tools](https://www.dpuse.app) used by the application, and you can use them to construct connectors and presenters.
19
25
 
20
26
  ## Introduction
21
27
 
@@ -25,9 +31,15 @@ DPUse (Data Positioning & Use) is an in-browser application that positions your
25
31
 
26
32
  <!-- USAGE_START -->
27
33
 
28
- This connector is automatically uploaded to the DPUse Engine cloud once released and becomes instantly available to all new browser app instances, with existing instances notified of the update.
34
+ ## Usage
35
+
36
+ This [package](https://www.npmjs.com/package/@dpuse/dpuse-tool-adaltas-csv-parser) is available on [npm](https://www.npmjs.com/). Install it with:
37
+
38
+ ```bash
39
+ npm install @dpuse/dpuse-tool-adaltas-csv-parser
40
+ ```
29
41
 
30
- You may view or clone this repository for your own purposes, such as building a new, similar connector, though there is currently no process to accept third-party connectors into DPUse at this stage. Cloned or forked code is unsupported and isn't guaranteed to remain compatible with the DPUse Engine as it evolves.
42
+ To work on the source instead, clone this repository.
31
43
 
32
44
  ```bash
33
45
  git clone https://github.com/dpuse/dpuse-tool-adaltas-csv-parser.git
@@ -35,82 +47,127 @@ cd dpuse-tool-adaltas-csv-parser
35
47
  npm install
36
48
  ```
37
49
 
38
- _Requires [Node.js](https://nodejs.org/) 23.11 or later, [npm](https://www.npmjs.com/) 11 or later, and [TypeScript](https://www.typescriptlang.org/) 5.9.3 or later._
50
+ _Requires [Node.js](https://nodejs.org/) 24 or later, [npm](https://www.npmjs.com/) 12 or later, and [TypeScript](https://www.typescriptlang.org/) 6.0.3 or later._
51
+
52
+ This repository is managed using the common set of actions provided by [@dpuse/dpuse-development](https://github.com/dpuse/dpuse-development). See the `scripts` block in [package.json](https://github.com/dpuse/dpuse-tool-adaltas-csv-parser/blob/main/package.json) for details.
39
53
 
40
54
  <!-- USAGE_END -->
41
55
 
42
56
  <!-- DEPENDENCY_LICENSES_START -->
43
57
 
44
- License data is collected automatically on each release using [license-checker](https://github.com/RSeidelsohn/license-checker-rseidelsohn). The following table lists all production dependencies. These dependencies (including transitive ones) have been checked and confirmed to use BSD-3-Clause or MIT — all permissive, commercially-friendly licenses. Users of the uploaded library are covered by these checks; developers cloning this repository should independently verify development dependencies.
45
-
46
- | Dependency | Version | License(s) | Document |
47
- | :----------------------------------------------------------- | :-----: | :--------- | :-------------------------------------------------------------------- |
48
- | [@dpuse/dpuse-shared](https://github.com/dpuse/dpuse-shared) | 0.3.758 | MIT | [LICENSE](licenses/downloads/@dpuse/dpuse-shared@0.3.758-LICENSE.txt) |
49
- | [csv-parse](https://github.com/adaltas/node-csv) | 7.0.1 | MIT | [LICENSE](licenses/downloads/csv-parse@7.0.1-LICENSE.txt) |
50
-
51
- <!-- DEPENDENCY_LICENSES_END -->
58
+ ## Dependency Licenses
59
+
60
+ License data is updated each time `npm run document` is run, using [license-checker](https://github.com/RSeidelsohn/license-checker-rseidelsohn). The following table lists all production dependencies. These dependencies (including transitive ones) have been checked and confirmed to use BSD-3-Clause or MIT — all permissive, commercially-friendly licenses. Users of the uploaded library are covered by these checks; developers cloning this repository should independently verify development dependencies.
61
+
62
+ | Dependency | Version | License(s) | Document |
63
+ | :--------------------------------------------------------------------- | :-----: | :----------- | :-------------------------------------------------------------------- |
64
+ | [@borewit/text-codec](https://github.com/Borewit/text-codec) | 0.2.2 | MIT | [LICENSE](licenses/downloads/@borewit/text-codec@0.2.2-LICENSE.txt) |
65
+ | [@dpuse/dpuse-shared](https://github.com/dpuse/dpuse-shared) | 0.3.865 | MIT | [LICENSE](licenses/downloads/@dpuse/dpuse-shared@0.3.865-LICENSE.txt) |
66
+ | [@tokenizer/inflate](https://github.com/Borewit/tokenizer-inflate) | 0.4.1 | MIT | [LICENSE](licenses/downloads/@tokenizer/inflate@0.4.1-LICENSE.txt) |
67
+ | [@tokenizer/token](https://github.com/Borewit/tokenizer-token) | 0.3.0 | MIT | [LICENSE](licenses/downloads/@tokenizer/token@0.3.0-LICENSE.txt) |
68
+ | [csv-parse](https://github.com/adaltas/node-csv) | 7.0.3 | MIT | [LICENSE](licenses/downloads/csv-parse@7.0.3-LICENSE.txt) |
69
+ | [debug](https://github.com/debug-js/debug) | 4.4.3 | MIT | [LICENSE](licenses/downloads/debug@4.4.3-LICENSE.txt) |
70
+ | [file-type](https://github.com/sindresorhus/file-type) | 22.1.1 | MIT | [LICENSE](licenses/downloads/file-type@22.1.1-LICENSE.txt) |
71
+ | [ieee754](https://github.com/feross/ieee754) | 1.2.1 | BSD-3-Clause | [LICENSE](licenses/downloads/ieee754@1.2.1-LICENSE.txt) |
72
+ | [ms](https://github.com/vercel/ms) | 2.1.3 | MIT | [LICENSE](licenses/downloads/ms@2.1.3-LICENSE.txt) |
73
+ | [strtok3](https://github.com/Borewit/strtok3) | 10.3.5 | MIT | [LICENSE](licenses/downloads/strtok3@10.3.5-LICENSE.txt) |
74
+ | [token-types](https://github.com/Borewit/token-types) | 6.1.2 | MIT | [LICENSE](licenses/downloads/token-types@6.1.2-LICENSE.txt) |
75
+ | [uint8array-extras](https://github.com/sindresorhus/uint8array-extras) | 1.6.0 | MIT | [LICENSE](licenses/downloads/uint8array-extras@1.6.0-LICENSE.txt) |
76
+ | [valibot](https://github.com/open-circle/valibot) | 1.5.0 | MIT | [LICENSE](licenses/downloads/valibot@1.5.0-LICENSE.txt) |
52
77
 
53
78
  ### Dependency Tree
54
79
 
55
- <!-- DEPENDENCY_TREE_START -->
80
+ The dependency tree below lists every package in this project — direct and transitive — along with its installed version, release date, and update status. Packages flagged ❗ have a newer version available; ⚠️ indicates a package that hasn't been updated in the last 6 months or longer. Neither flag necessarily indicates a problem: we let new releases stabilise before upgrading, and some packages are mature and stable (have limited or no dependencies), so they require no active development.
81
+
82
+ - **[@dpuse/dpuse-shared](https://github.com/dpuse/dpuse-shared)** 0.3.865 — this month: 2026-09-29
83
+ - **[file-type](https://github.com/sindresorhus/file-type)** 22.1.1 — this month: 2026-09-17
84
+ - **[@tokenizer/inflate](https://github.com/Borewit/tokenizer-inflate)** 0.4.1 — **10 months** ago: 2025-11-18 ⚠️
85
+ - **[debug](https://github.com/debug-js/debug)** 4.4.3 — **12 months** ago: 2025-09-13 ⚠️
86
+ - **[ms](https://github.com/vercel/ms)** 2.1.3 — **69 months** ago: 2020-12-08 ⚠️
87
+ - **[token-types](https://github.com/Borewit/token-types)** 6.1.2 — **8 months** ago: 2026-01-01 ⚠️
88
+ - **[strtok3](https://github.com/Borewit/strtok3)** 10.3.5 — **6 months** ago: 2026-03-21
89
+ - **[@tokenizer/token](https://github.com/Borewit/tokenizer-token)** 0.3.0 — **62 months** ago: 2021-07-12 ⚠️
90
+ - **[token-types](https://github.com/Borewit/token-types)** 6.1.2 — **8 months** ago: 2026-01-01 ⚠️
91
+ - **[@borewit/text-codec](https://github.com/Borewit/text-codec)** 0.2.2 — **6 months** ago: 2026-03-11
92
+ - **[@tokenizer/token](https://github.com/Borewit/tokenizer-token)** 0.3.0 — **62 months** ago: 2021-07-12 ⚠️
93
+ - **[ieee754](https://github.com/feross/ieee754)** 1.2.1 — **71 months** ago: 2020-10-27 ⚠️
94
+ - **[uint8array-extras](https://github.com/sindresorhus/uint8array-extras)** 1.6.0 — this month: 2026-09-26
95
+ - **[valibot](https://github.com/open-circle/valibot)** 1.5.0 — this month: 2026-09-09
96
+ - **[csv-parse](https://github.com/adaltas/node-csv)** 7.0.3 — this month: 2026-09-25
56
97
 
57
- The dependency tree below lists every package in this project — direct and transitive — along with its installed version, release date, and update status. Packages flagged ❗ have a newer version available; ⚠️ indicates a package that hasn't been updated in the last 6 months or longer. Neither flag necessarily indicates a problem: we let new releases stabilise before upgrading, and some packages are simply mature and stable, requiring no active development.
58
-
59
- - **[@dpuse/dpuse-shared](https://github.com/dpuse/dpuse-shared)** 0.3.758 — this month: 2026-07-27
60
- - **[csv-parse](https://github.com/adaltas/node-csv)** 7.0.1 — **1 month** ago: 2026-07-02
61
-
62
- <!-- DEPENDENCY_TREE_END -->
98
+ <!-- DEPENDENCY_LICENSES_END -->
63
99
 
64
100
  <!-- BUNDLE_START -->
65
101
 
66
- The Bundle Analysis Report is generated automatically on each release using [Sonda](https://sonda.dev/), which analyses final source maps to reveal the actual effects of tree-shaking and minification rather than relying on pre-build estimates.
102
+ ## Bundle Analysis
103
+
104
+ This report is updated with each release, from the bundle the release builds, using [Sonda](https://sonda.dev/), which analyses final source maps to reveal the actual effects of tree-shaking and minification rather than relying on pre-build estimates.
67
105
 
68
106
  _Note: Sonda's Vite reports currently exclude CSS files, since Vite does not generate source maps for CSS._
69
107
 
70
- |Chunk/Module/File|Composition|
71
- |:------ |:-----------|
72
- | dist/dpuse-tool-adaltas-csv-parser.es.js | 109.5 kB · brotli 24.5 kB |
73
- | &nbsp;&nbsp;&nbsp;&nbsp;csv-parse → dist/esm/index.js | `██████████████████░░` 90.7% |
74
- | &nbsp;&nbsp;&nbsp;&nbsp;(unassigned) → [unassigned] | `█░░░░░░░░░░░░░░░░░░░` 5.0% |
75
- | &nbsp;&nbsp;&nbsp;&nbsp;src → index.ts | `█░░░░░░░░░░░░░░░░░░░` 3.3% |
76
- | &nbsp;&nbsp;&nbsp;&nbsp;@dpuse/dpuse-shared → dist/dpuse-shared-errors.es.js | `░░░░░░░░░░░░░░░░░░░░` 1.0% |
108
+ | Chunk/Module/File | Composition |
109
+ | :-------------------------------------------------------------------- | :--------------------------- |
110
+ | dist/dpuse-tool-adaltas-csv-parser.es.js | 118.4 kB · gzip 30.1 kB |
111
+ | &nbsp;&nbsp;&nbsp;&nbsp;csv-parse → dist/esm/index.js | `█████████████████░░░` 83.9% |
112
+ | &nbsp;&nbsp;&nbsp;&nbsp;@dpuse/dpuse-shared → dist/dpuse-shared.es.js | `█░░░░░░░░░░░░░░░░░░░` 7.5% |
113
+ | &nbsp;&nbsp;&nbsp;&nbsp;(bundler output, whitespace & JSON) | `█░░░░░░░░░░░░░░░░░░░` 5.6% |
114
+ | &nbsp;&nbsp;&nbsp;&nbsp;src → index.ts | `█░░░░░░░░░░░░░░░░░░░` 3.1% |
77
115
 
78
- (unassigned) = bytes Sonda can't trace to a specific source line (whitespace, stray keywords, bundler-injected region markers) — not actual missing/unknown code.
116
+ (bundler output, whitespace & JSON) = bytes Sonda can't trace to a source file: whitespace (indentation and line breaks), code the bundler generates (region comments, the combined import/export lines, its small runtime helper and wrappers), and imported JSON such as `config.json`, which the bundler doesn't map. The JSON and the generated code are real bytes that ship; the whitespace mostly disappears once compressed.
79
117
 
80
118
  <!-- BUNDLE_END -->
81
119
 
82
- <!-- GOVERNANCE_START -->
120
+ <!-- QUALITY_SECURITY_START -->
121
+
122
+ ## Quality & Security
123
+
124
+ This section is updated each time `npm run document` is run. Settings come from the repository's workflow files and GitHub. Test coverage and the Fallow score are measured at the same time.
83
125
 
84
- ## Security & Quality
126
+ ### Testing
85
127
 
86
- ### CodeQL
128
+ | Check | Status | What it does |
129
+ | :------------------- | :----- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
130
+ | Unit tests | ✅ On | [Vitest](https://vitest.dev) runs the unit tests. Part of the [CI workflow](https://github.com/dpuse/dpuse-tool-adaltas-csv-parser/actions/workflows/ci.yml) on every push to `main`. |
131
+ | Property-based tests | ❌ Off | [fast-check](https://fast-check.dev) runs many random inputs per test to find edge cases, alongside the unit tests. |
87
132
 
88
- [CodeQL](https://github.com/dpuse/dpuse-tool-adaltas-csv-parser/security/code-scanning) static analysis runs on every push to `main` and on a weekly schedule, scanning TypeScript, JavaScript, Rust, and GitHub Actions workflow files for security vulnerabilities and coding errors.
133
+ ### Code Quality
89
134
 
90
- ### SonarCloud
135
+ | Check | Status | What it does |
136
+ | :------------ | :----- | :-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
137
+ | Code analysis | ❌ Off | [SonarCloud](https://sonarcloud.io) checks every push for bugs, code smells and vulnerabilities. |
138
+ | Linting | ✅ On | [ESLint](https://eslint.org) checks the code for errors and style problems. Part of the [CI workflow](https://github.com/dpuse/dpuse-tool-adaltas-csv-parser/actions/workflows/ci.yml) on every push to `main`. |
91
139
 
92
- [SonarCloud](https://sonarcloud.io/summary/new_code?id=dpuse_dpuse-tool-adaltas-csv-parser) performs continuous code quality and security analysis on every push, detecting bugs, code smells, and security vulnerabilities in the TypeScript source.
140
+ ### Security Analysis
93
141
 
94
- ### Vulnerability Scanning
142
+ | Check | Status | What it does |
143
+ | :-------------- | :----- | :--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
144
+ | Push protection | ✅ On | [GitHub push protection](https://docs.github.com/en/code-security/secret-scanning/push-protection-for-repositories-and-organizations) blocks pushes that contain credentials. |
145
+ | Static analysis | ✅ On | [![CodeQL](https://github.com/dpuse/dpuse-tool-adaltas-csv-parser/actions/workflows/codeql.yml/badge.svg)](https://github.com/dpuse/dpuse-tool-adaltas-csv-parser/security/code-scanning) [CodeQL](https://codeql.github.com) scans GitHub Actions and JavaScript/TypeScript for security vulnerabilities, using the extended security queries, on every push and pull request to `main` and weekly. |
146
+ | Secret scanning | ✅ On | [GitHub secret scanning](https://docs.github.com/en/code-security/secret-scanning) detects credentials, such as API keys and tokens, committed to the repository. |
95
147
 
96
- Two complementary tools continuously monitor dependencies for known vulnerabilities:
148
+ ### Dependencies
97
149
 
98
- - [npm audit](https://docs.npmjs.com/cli/v8/commands/npm-audit) runs on every push to `main` via the CI workflow, failing the build if any high or critical severity vulnerabilities are detected.
99
- - [GitHub Dependabot](https://docs.github.com/en/code-security/dependabot) automatically raises pull requests to update vulnerable dependencies, drawing on the GitHub Advisory Database which combines NVD and npm-specific advisories.
150
+ | Check | Status | What it does |
151
+ | :------------------ | :----- | :-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
152
+ | Vulnerability audit | ✅ On | [npm audit](https://docs.npmjs.com/cli/commands/npm-audit) fails when any dependency has a known vulnerability. Part of the [CI workflow](https://github.com/dpuse/dpuse-tool-adaltas-csv-parser/actions/workflows/ci.yml) on every push to `main`. |
153
+ | Supply chain risk | ✅ On | [Socket](https://socket.dev) flags malicious packages, typosquatting and suspicious behaviour that may not yet have a CVE. |
154
+ | Security alerts | ✅ On | [Dependabot](https://docs.github.com/en/code-security/dependabot) alerts when a dependency has a known vulnerability, using the GitHub Advisory Database. |
155
+ | Security updates | ❌ Off | [Dependabot](https://docs.github.com/en/code-security/dependabot) opens pull requests that update vulnerable dependencies. These are handled manually. |
156
+ | Version updates | ❌ Off | [Dependabot](https://docs.github.com/en/code-security/dependabot) opens pull requests for new dependency versions. These are handled manually. |
100
157
 
101
- ### Supply Chain Security
158
+ ### OpenSSF 🚧
159
+
160
+ [![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/dpuse/dpuse-tool-adaltas-csv-parser/badge)](https://scorecard.dev/viewer/?uri=github.com/dpuse/dpuse-tool-adaltas-csv-parser)
102
161
 
103
- [Socket.dev](https://socket.dev) monitors all dependencies for supply chain risk — detecting malicious packages, dependency confusion, typosquatting, and suspicious behaviour that may not yet have a CVE.
162
+ This project is working towards the [OpenSSF Best Practices](https://www.bestpractices.dev) Passing badge, a self-certification covering security policy, vulnerability reporting, build processes, code quality, and more. Currently the [OpenSSF Scorecard](https://scorecard.dev) provides an independent automated assessment of the project's security practices and is an ongoing area of improvement.
104
163
 
105
164
  ### Reporting Vulnerabilities
106
165
 
107
166
  Please do not open public GitHub issues for security vulnerabilities. Use [GitHub private vulnerability reporting](https://github.com/dpuse/dpuse-tool-adaltas-csv-parser/security/advisories/new) instead. See [SECURITY.md](./SECURITY.md) for the full disclosure policy, contact details, and expected response times.
108
167
 
109
- ### OpenSSF 🚧
110
-
111
- [![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/dpuse/dpuse-tool-adaltas-csv-parser/badge)](https://scorecard.dev/viewer/?uri=github.com/dpuse/dpuse-tool-adaltas-csv-parser)
168
+ <!-- QUALITY_SECURITY_END -->
112
169
 
113
- This project is working towards the [OpenSSF Best Practices](https://www.bestpractices.dev) Passing badge, a self-certification covering security policy, vulnerability reporting, build processes, code quality, and more. Currently the [OpenSSF Scorecard](https://scorecard.dev/viewer/?uri=github.com/dpuse/dpuse-tool-adaltas-csv-parser) provides an independent automated assessment of the project's security practices and is an ongoing area of improvement.
170
+ <!-- CONTRIBUTING_LICENSE_START -->
114
171
 
115
172
  ## Contributing
116
173
 
@@ -122,6 +179,6 @@ For security vulnerabilities, see [Reporting Vulnerabilities](#reporting-vulnera
122
179
 
123
180
  This project is licensed under the MIT License, permitting free use, modification, and distribution.
124
181
 
125
- [MIT](./LICENSE) © 2026-present Jonathan Terrell
182
+ [MIT](./LICENSE) © 2026 Jonathan Terrell
126
183
 
127
- <!-- GOVERNANCE_END -->
184
+ <!-- CONTRIBUTING_LICENSE_END -->