@dpuse/eslint-config-dpuse 1.0.111 → 1.0.112
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +78 -5
- package/package.json +7 -3
package/README.md
CHANGED
|
@@ -1,24 +1,97 @@
|
|
|
1
1
|
# DPUse ESLint Configuration
|
|
2
2
|
|
|
3
|
+
<!-- OPENING_START -->
|
|
4
|
+
|
|
3
5
|
[](./LICENSE)
|
|
4
|
-
[](https://github.com/dpuse/eslint-config-dpuse/releases/latest)
|
|
7
|
+
[](https://github.com/dpuse/eslint-config-dpuse/actions/workflows/ci.yml)
|
|
8
|
+
[](https://github.com/dpuse/eslint-config-dpuse/actions/workflows/codeql.yml)
|
|
9
|
+
[](https://sonarcloud.io/summary/new_code?id=dpuse_eslint-config-dpuse)
|
|
10
|
+
|
|
11
|
+
[Documentation](https://www.dpuse.app) · [Report a Vulnerability](https://github.com/dpuse/eslint-config-dpuse/security/advisories/new) · [Open an Issue](https://github.com/dpuse/eslint-config-dpuse/issues)
|
|
12
|
+
|
|
13
|
+
## About DPUse
|
|
14
|
+
|
|
15
|
+
DPUse (Data Positioning & Use) is an in-browser application that positions your data for use through three core activities: sourcing, contextualising, and publishing. **Sourcing** uses a library of [Connectors](https://www.dpuse.app) to establish [Connections](https://www.dpuse.app) to applications, databases, file stores, and curated datasets; these connections are subsequently used to configure structured [Data Views](https://www.dpuse.app) from the underlying sources. **Contextualising** extracts chronological events from those [Data Views](https://www.dpuse.app) and maps them into comprehensive [Context Models](https://www.dpuse.app). This provides the DPUse Engine with the structural framework required to generate deterministic transactions, facts, or observations. **Publishing** employs a library of [Presenters](https://www.dpuse.app) to render standard [Presentations](https://www.dpuse.app) immediately using the contextualised data; additionally, [Cookbooks](https://www.dpuse.app) of [Recipes](https://www.dpuse.app) allow you to build Data Apps using your preferred tools.
|
|
5
16
|
|
|
6
17
|
## Introduction
|
|
7
18
|
|
|
8
19
|
Common ESLint configuration used in most DPUse projects.
|
|
9
20
|
|
|
21
|
+
<!-- OPENING_END -->
|
|
22
|
+
|
|
23
|
+
<!-- USAGE_START -->
|
|
24
|
+
|
|
25
|
+
This connector is automatically uploaded to the DPUse Engine cloud once released and becomes instantly available to all new browser app instances, with existing instances notified of the update.
|
|
26
|
+
|
|
27
|
+
You may view or clone this repository for your own purposes, such as building a new, similar connector, though there is currently no process to accept third-party connectors into DPUse at this stage. Cloned or forked code is unsupported and isn't guaranteed to remain compatible with the DPUse Engine as it evolves.
|
|
28
|
+
|
|
29
|
+
```bash
|
|
30
|
+
git clone https://github.com/dpuse/eslint-config-dpuse.git
|
|
31
|
+
cd eslint-config-dpuse
|
|
32
|
+
npm install
|
|
33
|
+
```
|
|
34
|
+
|
|
35
|
+
_Requires [Node.js](https://nodejs.org/) 22 or later, [npm](https://www.npmjs.com/) 11 or later, and [TypeScript](https://www.typescriptlang.org/) 6.0.3 or later._
|
|
36
|
+
|
|
37
|
+
<!-- USAGE_END -->
|
|
38
|
+
|
|
10
39
|
### Dependency Licenses
|
|
11
40
|
|
|
12
41
|
<!-- DEPENDENCY_LICENSES_START -->
|
|
13
42
|
|
|
14
43
|
> [!WARNING]
|
|
15
|
-
> Dependency licenses are not documented here: @dpuse/dpuse
|
|
44
|
+
> Dependency licenses are not documented here: @dpuse/eslint-config-dpuse is a development-only tool and is never part of a production release.
|
|
16
45
|
|
|
17
46
|
<!-- DEPENDENCY_LICENSES_END -->
|
|
18
47
|
|
|
19
48
|
<!-- DEPENDENCY_TREE_START -->
|
|
20
49
|
|
|
21
|
-
> [!WARNING]
|
|
22
|
-
> Dependency licenses are not documented here: @dpuse/dpuse-development is a development-only tool and is never part of a production release
|
|
23
|
-
|
|
24
50
|
<!-- DEPENDENCY_TREE_END -->
|
|
51
|
+
|
|
52
|
+
<!-- GOVERNANCE_START -->
|
|
53
|
+
|
|
54
|
+
## Security & Quality
|
|
55
|
+
|
|
56
|
+
### CodeQL
|
|
57
|
+
|
|
58
|
+
[CodeQL](https://github.com/dpuse/eslint-config-dpuse/security/code-scanning) static analysis runs on every push to `main` and on a weekly schedule, scanning TypeScript, JavaScript, Rust, and GitHub Actions workflow files for security vulnerabilities and coding errors.
|
|
59
|
+
|
|
60
|
+
### SonarCloud
|
|
61
|
+
|
|
62
|
+
[SonarCloud](https://sonarcloud.io/summary/new_code?id=dpuse_eslint-config-dpuse) performs continuous code quality and security analysis on every push, detecting bugs, code smells, and security vulnerabilities in the TypeScript source.
|
|
63
|
+
|
|
64
|
+
### Vulnerability Scanning
|
|
65
|
+
|
|
66
|
+
Two complementary tools continuously monitor dependencies for known vulnerabilities:
|
|
67
|
+
|
|
68
|
+
- [npm audit](https://docs.npmjs.com/cli/v8/commands/npm-audit) runs on every push to `main` via the CI workflow, failing the build if any high or critical severity vulnerabilities are detected.
|
|
69
|
+
- [GitHub Dependabot](https://docs.github.com/en/code-security/dependabot) automatically raises pull requests to update vulnerable dependencies, drawing on the GitHub Advisory Database which combines NVD and npm-specific advisories.
|
|
70
|
+
|
|
71
|
+
### Supply Chain Security
|
|
72
|
+
|
|
73
|
+
[Socket.dev](https://socket.dev) monitors all dependencies for supply chain risk — detecting malicious packages, dependency confusion, typosquatting, and suspicious behaviour that may not yet have a CVE.
|
|
74
|
+
|
|
75
|
+
### Reporting Vulnerabilities
|
|
76
|
+
|
|
77
|
+
Please do not open public GitHub issues for security vulnerabilities. Use [GitHub private vulnerability reporting](https://github.com/dpuse/eslint-config-dpuse/security/advisories/new) instead. See [SECURITY.md](./SECURITY.md) for the full disclosure policy, contact details, and expected response times.
|
|
78
|
+
|
|
79
|
+
### OpenSSF 🚧
|
|
80
|
+
|
|
81
|
+
[](https://scorecard.dev/viewer/?uri=github.com/dpuse/eslint-config-dpuse)
|
|
82
|
+
|
|
83
|
+
This project is working towards the [OpenSSF Best Practices](https://www.bestpractices.dev) Passing badge, a self-certification covering security policy, vulnerability reporting, build processes, code quality, and more. Currently the [OpenSSF Scorecard](https://scorecard.dev/viewer/?uri=github.com/dpuse/eslint-config-dpuse) provides an independent automated assessment of the project's security practices and is an ongoing area of improvement.
|
|
84
|
+
|
|
85
|
+
## Contributing
|
|
86
|
+
|
|
87
|
+
This repository is maintained solely by its owner and does not, at present, accept external contributions into the canonical repo. Its source is published openly under the MIT License — every DPUse project is fully open source except DPUse Engine, which remains closed and proprietary.
|
|
88
|
+
|
|
89
|
+
For security vulnerabilities, see [Reporting Vulnerabilities](#reporting-vulnerabilities). For bugs, inconsistencies, or other feedback, [open a GitHub issue](https://github.com/dpuse/eslint-config-dpuse/issues) — feedback is read, but responses and fixes are at the maintainer's discretion.
|
|
90
|
+
|
|
91
|
+
## License
|
|
92
|
+
|
|
93
|
+
This project is licensed under the MIT License, permitting free use, modification, and distribution.
|
|
94
|
+
|
|
95
|
+
[MIT](./LICENSE) © 2026-present Jonathan Terrell
|
|
96
|
+
|
|
97
|
+
<!-- GOVERNANCE_END -->
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@dpuse/eslint-config-dpuse",
|
|
3
|
-
"version": "1.0.
|
|
3
|
+
"version": "1.0.112",
|
|
4
4
|
"private": false,
|
|
5
5
|
"description": "Common ESLint configuration used in most DPUse projects.",
|
|
6
6
|
"license": "MIT",
|
|
@@ -32,7 +32,11 @@
|
|
|
32
32
|
"audit": "node -e \"import('@dpuse/dpuse-development').then(m => m.auditDependencies())\"",
|
|
33
33
|
"build": "tsc -p tsconfig.build.json",
|
|
34
34
|
"check": "node -e \"import('@dpuse/dpuse-development').then(m => m.checkConfigFiles())\" && node -e \"import('@dpuse/dpuse-development').then(m => m.checkDependencies())\"",
|
|
35
|
-
"document": "
|
|
35
|
+
"document": "npm run documentOpening && npm run documentUsage && npm run documentDependencies && npm run documentGovernance",
|
|
36
|
+
"documentDependencies": "node -e \"import('@dpuse/dpuse-development').then(m => m.documentDependencies(''))\"",
|
|
37
|
+
"documentGovernance": "node -e \"import('@dpuse/dpuse-development').then(m => m.documentGovernance())\"",
|
|
38
|
+
"documentOpening": "node -e \"import('@dpuse/dpuse-development').then(m => m.documentOpening())\"",
|
|
39
|
+
"documentUsage": "node -e \"import('@dpuse/dpuse-development').then(m => m.documentUsage())\"",
|
|
36
40
|
"format": "node -e \"import('@dpuse/dpuse-development').then(m => m.formatCode())\"",
|
|
37
41
|
"lint": "node -e \"import('@dpuse/dpuse-development').then(m => m.lintCode())\"",
|
|
38
42
|
"release": "npm run build && npm run sync && op run --env-file=.env -- npm publish --access public",
|
|
@@ -56,7 +60,7 @@
|
|
|
56
60
|
"typescript-eslint": "^8.63.0"
|
|
57
61
|
},
|
|
58
62
|
"devDependencies": {
|
|
59
|
-
"@dpuse/dpuse-development": "^0.3.
|
|
63
|
+
"@dpuse/dpuse-development": "^0.3.686",
|
|
60
64
|
"@types/eslint-plugin-security": "^3.0.1",
|
|
61
65
|
"@types/node": "^26.1.1",
|
|
62
66
|
"eslint": "^10.6.0",
|