@mneme-ai/core 2.15.2 → 2.16.1

package/dist/public_audit/public_audit.test.js

@@ -0,0 +1,64 @@
+import { describe, it, expect } from "vitest";
+import { audit, formatPublicAuditLine } from "./index.js";
+describe("v2.16 · MNEME AURELIAN PUBLIC AUDIT", () => {
+    it("platinum verdict for popular + fresh + permissive + typed package", () => {
+        const r = audit({
+            registry: "npm", packageName: "react",
+            metadata: {
+                version: "18.3.0",
+                weeklyDownloads: 25_000_000,
+                stars: 220_000,
+                license: "MIT",
+                hasTypes: true, hasReadme: true,
+                homepage: "https://react.dev",
+                lastPublished: new Date(Date.now() - 7 * 24 * 60 * 60 * 1000).toISOString(),
+            },
+        });
+        expect(r.composite).toBeGreaterThanOrEqual(85);
+        expect(["platinum", "gold"]).toContain(r.verdict);
+    });
+    it("needs_work for stale + unlicensed + no-readme package", () => {
+        const r = audit({
+            registry: "npm", packageName: "obscure-broken-thing",
+            metadata: {
+                weeklyDownloads: 5,
+                stars: 1,
+                license: undefined,
+                hasTypes: false, hasReadme: false,
+                lastPublished: new Date(Date.now() - 4 * 365 * 24 * 60 * 60 * 1000).toISOString(),
+            },
+        });
+        expect(r.verdict).toBe("needs_work");
+        expect(r.recommendations.length).toBeGreaterThan(0);
+    });
+    it("recommends adding types when missing", () => {
+        const r = audit({
+            registry: "npm", packageName: "x",
+            metadata: { weeklyDownloads: 100, hasReadme: true, license: "MIT", hasTypes: false, lastPublished: new Date().toISOString() },
+        });
+        expect(r.recommendations.some((s) => /TypeScript types/i.test(s))).toBe(true);
+    });
+    it("flags copyleft licenses as 'restrictive for commercial'", () => {
+        const r = audit({
+            registry: "npm", packageName: "x",
+            metadata: { weeklyDownloads: 100, license: "GPL-3.0", hasReadme: true, hasTypes: true, lastPublished: new Date().toISOString() },
+        });
+        expect(r.evidence.some((e) => /copyleft|restrictive/i.test(e))).toBe(true);
+    });
+    it("HMAC sig is 64 hex", () => {
+        const r = audit({ registry: "npm", packageName: "x", metadata: {} });
+        expect(r.sig).toMatch(/^[0-9a-f]{64}$/);
+    });
+    it("freshness scoring is monotonic with age", () => {
+        const day = 24 * 60 * 60 * 1000;
+        const recent = audit({ registry: "npm", packageName: "a", metadata: { lastPublished: new Date(Date.now() - 10 * day).toISOString(), license: "MIT", hasReadme: true, hasTypes: true, weeklyDownloads: 1000 } });
+        const old = audit({ registry: "npm", packageName: "b", metadata: { lastPublished: new Date(Date.now() - 400 * day).toISOString(), license: "MIT", hasReadme: true, hasTypes: true, weeklyDownloads: 1000 } });
+        expect(recent.scores.freshness).toBeGreaterThan(old.scores.freshness);
+    });
+    it("formatPublicAuditLine summarises", () => {
+        const r = audit({ registry: "npm", packageName: "react", metadata: { weeklyDownloads: 25_000_000, license: "MIT", hasTypes: true, hasReadme: true, lastPublished: new Date().toISOString() } });
+        expect(formatPublicAuditLine(r)).toContain("AUDIT");
+        expect(formatPublicAuditLine(r)).toContain("/100");
+    });
+});
+//# sourceMappingURL=public_audit.test.js.map

package/dist/public_audit/public_audit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public_audit.test.js","sourceRoot":"","sources":["../../src/public_audit/public_audit.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAE1D,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,CAAC,GAAG,KAAK,CAAC;YACd,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO;YACrC,QAAQ,EAAE;gBACR,OAAO,EAAE,QAAQ;gBACjB,eAAe,EAAE,UAAU;gBAC3B,KAAK,EAAE,OAAO;gBACd,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI;gBAC/B,QAAQ,EAAE,mBAAmB;gBAC7B,aAAa,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;aAC5E;SACF,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;QAC/C,MAAM,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,GAAG,KAAK,CAAC;YACd,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,sBAAsB;YACpD,QAAQ,EAAE;gBACR,eAAe,EAAE,CAAC;gBAClB,KAAK,EAAE,CAAC;gBACR,OAAO,EAAE,SAAS;gBAClB,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK;gBACjC,aAAa,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;aAClF;SACF,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACrC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,GAAG,KAAK,CAAC;YACd,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG;YACjC,QAAQ,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;SAC9H,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,GAAG,KAAK,CAAC;YACd,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG;YACjC,QAAQ,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;SACjI,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAC5B,MAAM,CAAC,GAAG,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAChC,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAChN,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9M,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,GAAG,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QAChM,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mneme-ai/core",
-  "version": "2.15.2",
+  "version": "2.16.1",
   "description": "Core indexing, retrieval, and graph engine for Mneme",
   "type": "module",
   "main": "./dist/index.js",