@financebuddha/standards 0.1.2 → 0.1.3

package/husky/pre-commit

@@ -10,15 +10,16 @@ if [ ! -f "$PATTERNS" ]; then
   PATTERNS="$ROOT/node_modules/@financebuddha/standards/secrets-patterns.txt"
 fi
 
-# Secrets scan on staged changes. Strip comment/blank lines from the patterns
-# file first — grep -f treats every line (including '# AWS') as a regex, which
-# would otherwise match the comments themselves.
+# Secrets scan on staged changes. Build a cleaned patterns file (drop comment/
+# blank lines) and match with `grep -Ef` so each line stays its own regex —
+# more robust than inlining patterns into a single `-E` argument. `|| true`
+# guards grep's exit-1-on-no-match from aborting the hook under husky's `set -e`.
 if [ -f "$PATTERNS" ]; then
-  # `|| true` guards grep's exit-1-on-no-match from aborting the hook under
-  # husky's `set -e`.
-  CLEAN=$(grep -vE '^[[:space:]]*#|^[[:space:]]*$' "$PATTERNS" || true)
-  if [ -n "$CLEAN" ]; then
-    SECRETS=$(git diff --cached -U0 | grep -E "$CLEAN" 2>/dev/null || true)
+  CLEAN_FILE=$(mktemp)
+  trap 'rm -f "$CLEAN_FILE"' EXIT
+  grep -vE '^[[:space:]]*#|^[[:space:]]*$' "$PATTERNS" > "$CLEAN_FILE" || true
+  if [ -s "$CLEAN_FILE" ]; then
+    SECRETS=$(git diff --cached -U0 | grep -Ef "$CLEAN_FILE" 2>/dev/null || true)
     if [ -n "$SECRETS" ]; then
       echo "❌  Possible secrets detected in staged changes:"
       echo "$SECRETS"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@financebuddha/standards",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Shared engineering standards: ESLint, TypeScript, Prettier, commitlint, secrets scanning, and Claude skills",
   "type": "module",
   "license": "MIT",