@nexly/web 0.17.0 → 1.0.0

package/README.md

@@ -90,7 +90,32 @@ await fetch('/api/link-visitor', {
 })
 ```
 
-`getVisitorId()` reads the persistent anonymous id Nexly stores in `localStorage`; `getSessionId()` reads the 30-minute tab session id from `sessionStorage`. Both are plain strings, safe to call from anywhere.
+`getVisitorId()` reads the persistent pseudonymous ID Nexly stores in `localStorage`; `getSessionId()` reads the 30-minute session ID that is also stored in `localStorage` so it can be shared across tabs. Both are plain strings, safe to call from anywhere. Make sure your use of device storage and analytics has the notices, lawful basis, and consent required in the visitor's jurisdiction.
+
+## Privacy mode (no device storage)
+
+Initialize with `privacyMode: true` and Nexly never reads or writes `localStorage` (or any other device storage) for its identifiers:
+
+```ts
+const client = Nexly.init({
+  appId: 'your-app-id',
+  key: 'your-ingest-key',
+  privacyMode: true,
+})
+```
+
+In privacy mode events carry no client-side visitor or session ID. Instead the Nexly collector derives a short-lived visit fingerprint server-side from the request IP and User-Agent. The fingerprint rotates every 24 hours and neither the IP nor the User-Agent is stored, so no persistent identifier links the same device across days. Visitors, visits, bounce rate, and pageviews keep working; cross-day returning-visitor metrics do not (the same trade-off Plausible and Fathom accept).
+
+If your application already has its own notion of a user or session, you can supply identifiers explicitly — they take precedence over both `localStorage` and the server-side fingerprint:
+
+```ts
+import { setVisitorId, setSessionId } from '@nexly/web'
+
+setVisitorId(user.analyticsId) // stable cross-visit identity you control
+setSessionId(session.id)       // explicit visit grouping
+```
+
+In privacy mode `getVisitorId()` / `getSessionId()` return the manual override when set, and an empty string otherwise. Whether privacy mode removes the need for a consent banner depends on the laws that apply to your visitors — the SDK guarantees only that it performs no device-storage access.
 
 See the full recipe (backend storage + emitting linked events) in the [`@nexly/node` README](https://www.npmjs.com/package/@nexly/node).
 

package/dist/browser-meta.js

@@ -3,7 +3,7 @@
  *
  * Does not include geo (country/region/city) — that requires server-side IP lookup.
  */
-import { getSessionId, getVisitorId } from './session.js';
+import { getSessionId, getVisitorId } from './identity.js';
 function safe(fn) {
     try {
         return fn();

package/dist/events/engagement.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engagement.d.ts","sourceRoot":"","sources":["../../src/events/engagement.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AA4BrD,KAAK,MAAM,GAAG,MAAM,IAAI,CAAA;AAExB;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAgHzE"}
+{"version":3,"file":"engagement.d.ts","sourceRoot":"","sources":["../../src/events/engagement.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AA6BrD,KAAK,MAAM,GAAG,MAAM,IAAI,CAAA;AAExB;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAgHzE"}

package/dist/events/engagement.js

@@ -9,6 +9,7 @@ function sendEngagement(creds, eventName, eventType, data, sessionContext) {
         collectUrl: creds.collectUrl,
         credentials: { appId: creds.appId, apiToken: creds.apiToken },
         client: creds.client,
+        privacyMode: creds.privacyMode,
         eventName,
         eventType,
         context: collectEventMeta(),

package/dist/events/outbound-links.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"outbound-links.d.ts","sourceRoot":"","sources":["../../src/events/outbound-links.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAkKrD,KAAK,MAAM,GAAG,MAAM,IAAI,CAAA;AAExB;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CA0C3E"}
+{"version":3,"file":"outbound-links.d.ts","sourceRoot":"","sources":["../../src/events/outbound-links.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAmKrD,KAAK,MAAM,GAAG,MAAM,IAAI,CAAA;AAExB;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CA0C3E"}

package/dist/events/outbound-links.js

@@ -49,6 +49,7 @@ function sendOutbound(creds, eventName, data) {
         collectUrl: creds.collectUrl,
         credentials: { appId: creds.appId, apiToken: creds.apiToken },
         client: creds.client,
+        privacyMode: creds.privacyMode,
         eventName,
         eventType: 'navigation',
         context: collectEventMeta(),

package/dist/events/pageview.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pageview.d.ts","sourceRoot":"","sources":["../../src/events/pageview.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAIrD,uDAAuD;AACvD,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,EAAE,IAAI,GAAE,MAA6B,GAAG,OAAO,CAW1G"}
+{"version":3,"file":"pageview.d.ts","sourceRoot":"","sources":["../../src/events/pageview.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAIrD,uDAAuD;AACvD,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,EAAE,IAAI,GAAE,MAA6B,GAAG,OAAO,CAY1G"}

package/dist/events/pageview.js

@@ -12,6 +12,7 @@ export function sendPageViewBeacon(creds, path = getDefaultPathname()) {
         collectUrl: creds.collectUrl,
         credentials: { appId: creds.appId, apiToken: creds.apiToken },
         client: creds.client,
+        privacyMode: creds.privacyMode,
         eventName: 'pageview',
         eventType: 'pageview',
         context: { ...collectEventMeta(), path },

package/dist/identity.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Browser identity resolution.
+ *
+ * Central switchboard between the storage-backed identifiers (`./session.js`)
+ * and privacy mode. Everything that attaches `visitor_id` / `session_id` to
+ * an event (browser-meta, engagement, outbound links) reads through this
+ * module, so the privacy-mode guarantee — no device-storage reads or writes —
+ * holds for every code path, not just `Nexly.pageview()`.
+ */
+/** Called from `Nexly.init` when the browser client starts. */
+export declare function configureBrowserIdentity(options: {
+    privacyMode?: boolean;
+}): void;
+/**
+ * Override the visitor id attached to subsequent events. Works in both modes;
+ * in privacy mode it is the only way to get a stable cross-visit visitor id.
+ * Pass an empty string to clear the override.
+ */
+export declare function setVisitorId(id: string): void;
+/**
+ * Override the session id attached to subsequent events. Works in both modes;
+ * in privacy mode it is the only way to control visit grouping client-side.
+ * Pass an empty string to clear the override.
+ */
+export declare function setSessionId(id: string): void;
+/** True when the SDK was initialized with `privacyMode: true`. */
+export declare function isPrivacyMode(): boolean;
+/**
+ * Resolved visitor id attached to each event.
+ *
+ * Default mode: manual override, else the persistent `localStorage` id.
+ * Privacy mode: manual override, else `''` — the SDK never touches device
+ * storage, and the collector derives a daily-rotating fingerprint instead.
+ */
+export declare function getVisitorId(): string;
+/**
+ * Resolved session id attached to each event.
+ *
+ * Default mode: manual override, else the 30-minute `localStorage` session.
+ * Privacy mode: manual override, else `''` (server-side visit grouping).
+ */
+export declare function getSessionId(): string;
+//# sourceMappingURL=identity.d.ts.map

package/dist/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAQH,+DAA+D;AAC/D,wBAAgB,wBAAwB,CAAC,OAAO,EAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAEjF;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAE7C;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAE7C;AAED,kEAAkE;AAClE,wBAAgB,aAAa,IAAI,OAAO,CAEvC;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAIrC;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAIrC"}

package/dist/identity.js

@@ -0,0 +1,64 @@
+/**
+ * Browser identity resolution.
+ *
+ * Central switchboard between the storage-backed identifiers (`./session.js`)
+ * and privacy mode. Everything that attaches `visitor_id` / `session_id` to
+ * an event (browser-meta, engagement, outbound links) reads through this
+ * module, so the privacy-mode guarantee — no device-storage reads or writes —
+ * holds for every code path, not just `Nexly.pageview()`.
+ */
+import { getStoredSessionId, getStoredVisitorId } from './session.js';
+let privacyMode = false;
+let manualVisitorId = '';
+let manualSessionId = '';
+/** Called from `Nexly.init` when the browser client starts. */
+export function configureBrowserIdentity(options) {
+    privacyMode = options.privacyMode === true;
+}
+/**
+ * Override the visitor id attached to subsequent events. Works in both modes;
+ * in privacy mode it is the only way to get a stable cross-visit visitor id.
+ * Pass an empty string to clear the override.
+ */
+export function setVisitorId(id) {
+    manualVisitorId = typeof id === 'string' ? id.trim() : '';
+}
+/**
+ * Override the session id attached to subsequent events. Works in both modes;
+ * in privacy mode it is the only way to control visit grouping client-side.
+ * Pass an empty string to clear the override.
+ */
+export function setSessionId(id) {
+    manualSessionId = typeof id === 'string' ? id.trim() : '';
+}
+/** True when the SDK was initialized with `privacyMode: true`. */
+export function isPrivacyMode() {
+    return privacyMode;
+}
+/**
+ * Resolved visitor id attached to each event.
+ *
+ * Default mode: manual override, else the persistent `localStorage` id.
+ * Privacy mode: manual override, else `''` — the SDK never touches device
+ * storage, and the collector derives a daily-rotating fingerprint instead.
+ */
+export function getVisitorId() {
+    if (manualVisitorId)
+        return manualVisitorId;
+    if (privacyMode)
+        return '';
+    return getStoredVisitorId();
+}
+/**
+ * Resolved session id attached to each event.
+ *
+ * Default mode: manual override, else the 30-minute `localStorage` session.
+ * Privacy mode: manual override, else `''` (server-side visit grouping).
+ */
+export function getSessionId() {
+    if (manualSessionId)
+        return manualSessionId;
+    if (privacyMode)
+        return '';
+    return getStoredSessionId();
+}

package/dist/index.d.ts

@@ -4,7 +4,7 @@
 export { Nexly } from './nexly.js';
 export type { NexlyEventInput, NexlyEventType, NexlyInit } from '@nexly/core';
 export { collectBrowserMeta, collectSessionMeta, collectEventMeta } from './browser-meta.js';
-export { getSessionId, getVisitorId } from './session.js';
+export { getSessionId, getVisitorId, isPrivacyMode, setSessionId, setVisitorId, } from './identity.js';
 export { sendBeaconCollect, type SendBeaconCollectInput } from './beacon.js';
 export { getDefaultPathname, sendPageViewBeacon, startEngagementTracking, startOutboundLinkTracking, } from './events/index.js';
 export type { CData, CollectCredentials, IngestCredentials, StandardAttributionKey, StandardContextOverride, TrackEventInput, } from '@nexly/core';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAClC,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAC7E,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAC5F,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AACzD,OAAO,EAAE,iBAAiB,EAAE,KAAK,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAC5E,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACV,KAAK,EACL,kBAAkB,EAClB,iBAAiB,EACjB,sBAAsB,EACtB,uBAAuB,EACvB,eAAe,GAChB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAClC,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAC7E,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAC5F,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,YAAY,GACb,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,iBAAiB,EAAE,KAAK,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAC5E,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACV,KAAK,EACL,kBAAkB,EAClB,iBAAiB,EACjB,sBAAsB,EACtB,uBAAuB,EACvB,eAAe,GAChB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAA"}

package/dist/index.js

@@ -3,7 +3,7 @@
  */
 export { Nexly } from './nexly.js';
 export { collectBrowserMeta, collectSessionMeta, collectEventMeta } from './browser-meta.js';
-export { getSessionId, getVisitorId } from './session.js';
+export { getSessionId, getVisitorId, isPrivacyMode, setSessionId, setVisitorId, } from './identity.js';
 export { sendBeaconCollect } from './beacon.js';
 export { getDefaultPathname, sendPageViewBeacon, startEngagementTracking, startOutboundLinkTracking, } from './events/index.js';
 export { buildCollectPayload, isStandardAttributionKey, STANDARD_ATTRIBUTION_KEYS } from '@nexly/core';

package/dist/nexly.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nexly.d.ts","sourceRoot":"","sources":["../src/nexly.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAe,KAAK,SAAS,EAAE,MAAM,aAAa,CAAA;AAOpE;;;GAGG;AACH,qBAAa,KAAM,SAAQ,SAAS;IAClC,OAAO,CAAC,cAAc,CAA4B;IAClD,OAAO,CAAC,iBAAiB,CAA4B;IAErD,0FAA0F;IAC1F,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,GAAG,KAAK;IAMtC,uEAAuE;IACvE,MAAM,CAAC,WAAW,IAAI,KAAK,GAAG,IAAI;gBAItB,IAAI,EAAE,SAAS;cAIR,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO;cAKpD,mBAAmB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;cAI9C,qBAAqB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAI1D,cAAc,IAAI,MAAM;IAIjC;;;;OAIG;IACH,eAAe,IAAI,MAAM,IAAI;IAgB7B;;;;OAIG;IACH,kBAAkB,IAAI,MAAM,IAAI;CAejC"}
+{"version":3,"file":"nexly.d.ts","sourceRoot":"","sources":["../src/nexly.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAe,KAAK,SAAS,EAAE,MAAM,aAAa,CAAA;AAQpE;;;GAGG;AACH,qBAAa,KAAM,SAAQ,SAAS;IAClC,OAAO,CAAC,cAAc,CAA4B;IAClD,OAAO,CAAC,iBAAiB,CAA4B;IAErD,0FAA0F;IAC1F,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,GAAG,KAAK;IAOtC,uEAAuE;IACvE,MAAM,CAAC,WAAW,IAAI,KAAK,GAAG,IAAI;gBAItB,IAAI,EAAE,SAAS;cAIR,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO;cAKpD,mBAAmB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;cAI9C,qBAAqB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAI1D,cAAc,IAAI,MAAM;IAIjC;;;;OAIG;IACH,eAAe,IAAI,MAAM,IAAI;IAiB7B;;;;OAIG;IACH,kBAAkB,IAAI,MAAM,IAAI;CAgBjC"}

package/dist/nexly.js

@@ -4,6 +4,7 @@ import { collectEventMeta, collectSessionMeta } from './browser-meta.js';
 import { startEngagementTracking } from './events/engagement.js';
 import { startOutboundLinkTracking } from './events/outbound-links.js';
 import { getDefaultPathname } from './events/pageview.js';
+import { configureBrowserIdentity } from './identity.js';
 /**
  * Browser-specific Nexly client. Implements transport via `navigator.sendBeacon`
  * and metadata via DOM/Navigator APIs.
@@ -13,6 +14,7 @@ export class Nexly extends NexlyBase {
     outboundLinksStop = null;
     /** Creates (or replaces) the browser singleton. Default `client` is `NexlyClient.Web`. */
     static init(options) {
+        configureBrowserIdentity({ privacyMode: options.privacyMode });
         const instance = new Nexly({ ...options, client: options.client ?? NexlyClient.Web });
         Nexly.setInstance(instance);
         return instance;
@@ -52,6 +54,7 @@ export class Nexly extends NexlyBase {
             appId: this.appId,
             apiToken: this.key,
             client: this.client,
+            privacyMode: this.privacyMode,
         });
         this.engagementStop = stop;
         return () => {
@@ -74,6 +77,7 @@ export class Nexly extends NexlyBase {
             appId: this.appId,
             apiToken: this.key,
             client: this.client,
+            privacyMode: this.privacyMode,
         });
         this.outboundLinksStop = stop;
         return () => {

package/dist/session.d.ts

@@ -1,13 +1,19 @@
 /**
- * Persistent anonymous visitor ID (localStorage). One per browser + origin.
+ * Persistent pseudonymous visitor ID (localStorage). One per browser + origin.
+ *
+ * Storage-backed implementation — application code should read identity via
+ * `./identity.js`, which layers privacy mode and manual overrides on top.
  */
-export declare function getVisitorId(): string;
+export declare function getStoredVisitorId(): string;
 /**
  * Session ID with 30-minute inactivity timeout.
  *
  * Stored in `localStorage` (not `sessionStorage`) so the same session is shared
  * across tabs and survives tab/window close. The 30-minute inactivity window is
  * enforced via `SESSION_TS_KEY`, matching Plausible's visit definition.
+ *
+ * Storage-backed implementation — application code should read identity via
+ * `./identity.js`, which layers privacy mode and manual overrides on top.
  */
-export declare function getSessionId(): string;
+export declare function getStoredSessionId(): string;
 //# sourceMappingURL=session.d.ts.map

package/dist/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAoBA;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAUrC;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAkBrC"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAoBA;;;;;GAKG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAU3C;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAkB3C"}

package/dist/session.js

@@ -15,9 +15,12 @@ function nowMs() {
     return Date.now();
 }
 /**
- * Persistent anonymous visitor ID (localStorage). One per browser + origin.
+ * Persistent pseudonymous visitor ID (localStorage). One per browser + origin.
+ *
+ * Storage-backed implementation — application code should read identity via
+ * `./identity.js`, which layers privacy mode and manual overrides on top.
  */
-export function getVisitorId() {
+export function getStoredVisitorId() {
     if (typeof localStorage === 'undefined') {
         return generateId();
     }
@@ -34,8 +37,11 @@ export function getVisitorId() {
  * Stored in `localStorage` (not `sessionStorage`) so the same session is shared
  * across tabs and survives tab/window close. The 30-minute inactivity window is
  * enforced via `SESSION_TS_KEY`, matching Plausible's visit definition.
+ *
+ * Storage-backed implementation — application code should read identity via
+ * `./identity.js`, which layers privacy mode and manual overrides on top.
  */
-export function getSessionId() {
+export function getStoredSessionId() {
     if (typeof localStorage === 'undefined') {
         return generateId();
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nexly/web",
-  "version": "0.17.0",
+  "version": "1.0.0",
   "description": "Nexly browser ingest SDK: sendBeacon transport, DOM metadata, engagement listeners on top of @nexly/core",
   "license": "MIT",
   "keywords": [
@@ -38,7 +38,7 @@
     "node": ">=20"
   },
   "dependencies": {
-    "@nexly/core": "0.17.0"
+    "@nexly/core": "1.0.0"
   },
   "devDependencies": {
     "typescript": "~6.0.2"