@dpuse/dpuse-tool-adaltas-csv-parser 0.0.160 → 0.0.161

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +15 -15
  2. package/package.json +2 -2
package/README.md CHANGED
@@ -125,17 +125,17 @@ This section is updated each time `npm run document` is run. Settings come from
125
125
 
126
126
  ### Testing
127
127
 
128
- | Check | Status | What it does |
129
- | :------------------- | :----- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
130
- | Unit tests | ✅ On | [Vitest](https://vitest.dev) runs the unit tests. Part of the [CI workflow](https://github.com/dpuse/dpuse-tool-adaltas-csv-parser/actions/workflows/ci.yml) on every push to `main`. |
131
- | Property-based tests | ❌ Off | [fast-check](https://fast-check.dev) runs many random inputs per test to find edge cases, alongside the unit tests. |
128
+ | Check | Status | What it does |
129
+ | :------------------- | :----- | :----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
130
+ | Unit tests | ✅ On | [Vitest](https://vitest.dev) runs the unit tests. Part of the [CI workflow](https://github.com/dpuse/dpuse-tool-adaltas-csv-parser/actions/workflows/ci.yml) on every push and pull request to `main`. |
131
+ | Property-based tests | ❌ Off | [fast-check](https://fast-check.dev) runs many random inputs per test to find edge cases, alongside the unit tests. |
132
132
 
133
133
  ### Code Quality
134
134
 
135
- | Check | Status | What it does |
136
- | :------------ | :----- | :-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
137
- | Code analysis | ❌ Off | [SonarCloud](https://sonarcloud.io) checks every push for bugs, code smells and vulnerabilities. |
138
- | Linting | ✅ On | [ESLint](https://eslint.org) checks the code for errors and style problems. Part of the [CI workflow](https://github.com/dpuse/dpuse-tool-adaltas-csv-parser/actions/workflows/ci.yml) on every push to `main`. |
135
+ | Check | Status | What it does |
136
+ | :------------ | :----- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
137
+ | Code analysis | ❌ Off | [SonarCloud](https://sonarcloud.io) checks every push for bugs, code smells and vulnerabilities. |
138
+ | Linting | ✅ On | [ESLint](https://eslint.org) checks the code for errors and style problems. Part of the [CI workflow](https://github.com/dpuse/dpuse-tool-adaltas-csv-parser/actions/workflows/ci.yml) on every push and pull request to `main`. |
139
139
 
140
140
  ### Security Analysis
141
141
 
@@ -147,13 +147,13 @@ This section is updated each time `npm run document` is run. Settings come from
147
147
 
148
148
  ### Dependencies
149
149
 
150
- | Check | Status | What it does |
151
- | :------------------ | :----- | :-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
152
- | Vulnerability audit | ✅ On | [npm audit](https://docs.npmjs.com/cli/commands/npm-audit) fails when any dependency has a known vulnerability. Part of the [CI workflow](https://github.com/dpuse/dpuse-tool-adaltas-csv-parser/actions/workflows/ci.yml) on every push to `main`. |
153
- | Supply chain risk | ✅ On | [Socket](https://socket.dev) flags malicious packages, typosquatting and suspicious behaviour that may not yet have a CVE. |
154
- | Security alerts | ✅ On | [Dependabot](https://docs.github.com/en/code-security/dependabot) alerts when a dependency has a known vulnerability, using the GitHub Advisory Database. |
155
- | Security updates | ❌ Off | [Dependabot](https://docs.github.com/en/code-security/dependabot) opens pull requests that update vulnerable dependencies. These are handled manually. |
156
- | Version updates | ❌ Off | [Dependabot](https://docs.github.com/en/code-security/dependabot) opens pull requests for new dependency versions. These are handled manually. |
150
+ | Check | Status | What it does |
151
+ | :------------------ | :----- | :----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
152
+ | Vulnerability audit | ✅ On | [npm audit](https://docs.npmjs.com/cli/commands/npm-audit) fails when a shipped dependency has any known vulnerability, or a development dependency has a high or critical one. Part of the [CI workflow](https://github.com/dpuse/dpuse-tool-adaltas-csv-parser/actions/workflows/ci.yml) on every push and pull request to `main`. |
153
+ | Supply chain risk | ✅ On | [Socket](https://socket.dev) flags malicious packages, typosquatting and suspicious behaviour that may not yet have a CVE. |
154
+ | Security alerts | ✅ On | [Dependabot](https://docs.github.com/en/code-security/dependabot) alerts when a dependency has a known vulnerability, using the GitHub Advisory Database. |
155
+ | Security updates | ❌ Off | [Dependabot](https://docs.github.com/en/code-security/dependabot) opens pull requests that update vulnerable dependencies. These are handled manually. |
156
+ | Version updates | ❌ Off | [Dependabot](https://docs.github.com/en/code-security/dependabot) opens pull requests for new dependency versions. These are handled manually. |
157
157
 
158
158
  ### OpenSSF 🚧
159
159
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@dpuse/dpuse-tool-adaltas-csv-parser",
3
- "version": "0.0.160",
3
+ "version": "0.0.161",
4
4
  "private": false,
5
5
  "description": "",
6
6
  "license": "MIT",
@@ -65,7 +65,7 @@
65
65
  "csv-parse": "^7.0.3"
66
66
  },
67
67
  "devDependencies": {
68
- "@dpuse/dpuse-development": "^0.3.791",
68
+ "@dpuse/dpuse-development": "^0.3.792",
69
69
  "@dpuse/eslint-config-dpuse": "^1.0.123",
70
70
  "@types/node": "^26.6.3",
71
71
  "eslint": "^10.11.0",