@visulima/vis 1.0.0-alpha.4 → 1.0.0-alpha.5

package/dist/catalog.d.ts

@@ -25,11 +25,16 @@ interface CatalogCheckOptions {
     exclude: string[];
     ignore: string[];
     include: string[];
+    includeLocked: boolean;
     includePrerelease: boolean;
+    minimumReleaseAge?: number;
+    minimumReleaseAgeExclude?: string[];
+    packageMode?: Record<string, UpdateTarget>;
     security?: boolean;
     target: UpdateTarget;
 }
 interface ReadCatalogOptions {
+    depFields?: string[];
     dev?: boolean;
     prod?: boolean;
 }
@@ -77,19 +82,32 @@ declare const getRegistryForPackage: (packageName: string, config: NpmrcConfig)
 };
 interface RegistryVersionInfo {
     latest: string;
+    /** Map of version string to ISO publish time (populated when minimumReleaseAge is set). */
+    publishTimes?: Map<string, string>;
     versions: string[];
 }
 declare const fetchPackageVersions: (packageName: string, registryConfig?: {
     authToken?: string;
     url: string;
-}, timeoutMs?: number) => Promise<RegistryVersionInfo>;
+}, timeoutMs?: number, fetchPublishTimes?: boolean) => Promise<RegistryVersionInfo>;
 declare const fetchVulnerabilities: (packages: {
     name: string;
     version: string;
 }[], timeoutMs?: number) => Promise<Map<string, SecurityVulnerability[]>>;
-declare const findTargetVersion: (versions: string[], latest: string, currentRange: string, target: UpdateTarget, includePrerelease: boolean) => string | undefined;
+declare const resolvePackageTarget: (packageName: string, globalTarget: UpdateTarget, packageMode?: Record<string, UpdateTarget>) => UpdateTarget;
+interface MaturityOptions {
+    minimumReleaseAge?: number;
+    minimumReleaseAgeExclude?: string[];
+    packageName?: string;
+    publishTimes?: Map<string, string>;
+}
+declare const findTargetVersion: (versions: string[], latest: string, currentRange: string, target: UpdateTarget, includePrerelease: boolean, maturity?: MaturityOptions) => string | undefined;
 interface CheckOutdatedResult {
+    /** Total number of unique packages checked (after filtering). */
+    checkedCount: number;
     failed: string[];
+    /** Packages that have newer versions on "latest" but were excluded by the target constraint. */
+    filteredByTarget: OutdatedEntry[];
     ignored: string[];
     outdated: OutdatedEntry[];
 }
@@ -114,5 +132,5 @@ interface ChangelogInfo {
     repoUrl?: string;
 }
 declare const fetchChangelogInfo: (packages: OutdatedEntry[], timeoutMs?: number) => Promise<ChangelogInfo[]>;
-export type { CatalogCheckOptions, CatalogProvider, ChangelogInfo, CheckOutdatedResult, NpmrcConfig, OutdatedEntry, OutputFormat, ReadCatalogOptions, SecurityVulnerability, SocketReport, UpdateTarget, };
-export { applyCatalogUpdates, applyPackageJsonUpdates, checkOutdated, createBackup, detectJsonIndent, extractPrefix, fetchChangelogInfo, fetchPackageVersions, fetchVulnerabilities, findTargetVersion, formatOutdatedJson, formatOutdatedMinimal, formatOutdatedTable, formatSummary, getRegistryForPackage, getUpdateType, groupByCatalog, hasBackup, hasCatalogs, hasPackageJsonDeps, isNewer, loadNpmrc, matchesFilters, matchesPattern, parseBunCatalogs, parseCatalogsFromYaml, parseCompositeCatalogName, parseNpmrc, parseVersion, promptPackageSelection, readCatalogs, readPackageJsonDeps, restoreFromBackup, toFilterArray, };
+export type { CatalogCheckOptions, CatalogProvider, ChangelogInfo, CheckOutdatedResult, MaturityOptions, NpmrcConfig, OutdatedEntry, OutputFormat, ReadCatalogOptions, SecurityVulnerability, SocketReport, UpdateTarget, };
+export { applyCatalogUpdates, applyPackageJsonUpdates, checkOutdated, createBackup, detectJsonIndent, extractPrefix, fetchChangelogInfo, fetchPackageVersions, fetchVulnerabilities, findTargetVersion, formatOutdatedJson, formatOutdatedMinimal, formatOutdatedTable, formatSummary, getRegistryForPackage, getUpdateType, groupByCatalog, hasBackup, hasCatalogs, hasPackageJsonDeps, isNewer, loadNpmrc, matchesFilters, matchesPattern, parseBunCatalogs, parseCatalogsFromYaml, parseCompositeCatalogName, parseNpmrc, parseVersion, promptPackageSelection, readCatalogs, readPackageJsonDeps, resolvePackageTarget, restoreFromBackup, toFilterArray, };

package/dist/config.d.ts

@@ -8,7 +8,7 @@ declare const CONFIG_FILES: string[];
  * Users can override any value — their settings always take precedence.
  * @see https://github.com/lirantal/awesome-npm-security-best-practices
  */
-declare const SECURITY_DEFAULTS: Required<Pick<NonNullable<VisConfig["security"]>, "blockExoticSubdeps" | "minimumReleaseAge" | "strictDepBuilds" | "trustPolicy" | "trustPolicyIgnoreAfter">>;
+declare const SECURITY_DEFAULTS: Required<Pick<NonNullable<VisConfig["security"]>, "blockExoticSubdeps" | "strictDepBuilds" | "trustPolicy" | "trustPolicyIgnoreAfter">>;
 /**
  * Apply secure defaults to a raw config object.
  * Merges `SECURITY_DEFAULTS` into `config.security`, preserving all user overrides.

package/dist/config.js

@@ -1 +1 @@
-var h=Object.defineProperty;var u=(e,t)=>h(e,"name",{value:t,configurable:!0});import{createRequire as C}from"node:module";import{findCacheDirSync as w}from"@visulima/find-cache-dir";import{ensureDirSync as p,isAccessibleSync as D,readJsonSync as I,writeJsonSync as x}from"@visulima/fs";import{join as o,dirname as E}from"@visulima/path";import{createJiti as P}from"jiti";const v=C(import.meta.url),r=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,d=u(e=>{if(typeof r<"u"&&r.versions&&r.versions.node){const[t,s]=r.versions.node.split(".").map(Number);if(t>22||t===22&&s>=3||t===20&&s>=16)return r.getBuiltinModule(e)}return v(e)},"__cjs_getBuiltinModule"),{createHash:_}=d("node:crypto"),{existsSync:y,readFileSync:S,copyFileSync:j,unlinkSync:b}=d("node:fs"),{tmpdir:F}=d("node:os");var T=Object.defineProperty,i=u((e,t)=>T(e,"name",{value:t,configurable:!0}),"e");const A=["vis.config.ts","vis.config.mts","vis.config.cts","vis.config.js","vis.config.mjs","vis.config.cjs"],J={blockExoticSubdeps:!0,minimumReleaseAge:20160,strictDepBuilds:!0,trustPolicy:"no-downgrade",trustPolicyIgnoreAfter:43200},R=i(e=>({...J,...e}),"mergeSecurityDefaults"),l=i(e=>({...e,security:R(e.security),update:{security:!0,target:"minor",...e.update}}),"applyDefaults"),V=i(e=>{for(const t of A){const s=o(e,t);if(y(s))return s}},"findVisConfigFile"),k=i(e=>_("sha256").update(S(e)).digest("hex"),"hashFileContents"),q=i(e=>{const t=o(e,"node_modules");if(y(t)){const n=o(t,".cache","vis");return p(n),o(n,"vis-config-cache.json")}const s=w("vis",{create:!0,cwd:e});return s?o(s,"vis-config-cache.json"):void 0},"getConfigCachePath"),B=i((e,t)=>{if(D(e))try{const s=I(e);if(s.hash===t)return s.config}catch{}},"readConfigCache"),N=i((e,t,s)=>{try{p(E(e)),x(e,{config:s,hash:t})}catch{}},"writeConfigCache"),H=i(async e=>{const t=V(e);if(!t)return l({});const s=k(t),n=q(e);if(n){const g=B(n,s);if(g)return g}const m=t.slice(t.lastIndexOf(".")),a=o(F(),`vis-config-${s}${m}`);j(t,a);let c;try{c=await P(e,{fsCache:!1,moduleCache:!1}).import(a,{default:!0,try:!0})??{}}finally{try{b(a)}catch{}}let f;return f=l(typeof c=="function"?await c()??{}:c),n&&N(n,s,f),f},"loadVisConfig"),Y=i(e=>l(e),"defineConfig");export{A as CONFIG_FILES,J as SECURITY_DEFAULTS,l as applyDefaults,Y as defineConfig,V as findVisConfigFile,H as loadVisConfig};
+var m=Object.defineProperty;var u=(e,t)=>m(e,"name",{value:t,configurable:!0});import{createRequire as C}from"node:module";import{findCacheDirSync as w}from"@visulima/find-cache-dir";import{ensureDirSync as p,isAccessibleSync as D,readJsonSync as x,writeJsonSync as E}from"@visulima/fs";import{join as o,dirname as I}from"@visulima/path";import{createJiti as P}from"jiti";const v=C(import.meta.url),r=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,d=u(e=>{if(typeof r<"u"&&r.versions&&r.versions.node){const[t,s]=r.versions.node.split(".").map(Number);if(t>22||t===22&&s>=3||t===20&&s>=16)return r.getBuiltinModule(e)}return v(e)},"__cjs_getBuiltinModule"),{createHash:_}=d("node:crypto"),{existsSync:y,readFileSync:S,copyFileSync:j,unlinkSync:b}=d("node:fs"),{tmpdir:F}=d("node:os");var T=Object.defineProperty,n=u((e,t)=>T(e,"name",{value:t,configurable:!0}),"e");const A=["vis.config.ts","vis.config.mts","vis.config.cts","vis.config.js","vis.config.mjs","vis.config.cjs"],J={blockExoticSubdeps:!0,strictDepBuilds:!0,trustPolicy:"no-downgrade",trustPolicyIgnoreAfter:43200},V=n(e=>({...J,...e}),"mergeSecurityDefaults"),l=n(e=>({...e,security:V(e.security),update:{security:!0,target:"minor",...e.update}}),"applyDefaults"),k=n(e=>{for(const t of A){const s=o(e,t);if(y(s))return s}},"findVisConfigFile"),q=n(e=>_("sha256").update(S(e)).digest("hex"),"hashFileContents"),B=n(e=>{const t=o(e,"node_modules");if(y(t)){const i=o(t,".cache","vis");return p(i),o(i,"vis-config-cache.json")}const s=w("vis",{create:!0,cwd:e});return s?o(s,"vis-config-cache.json"):void 0},"getConfigCachePath"),N=n((e,t)=>{if(D(e))try{const s=x(e);if(s.hash===t)return s.config}catch{}},"readConfigCache"),O=n((e,t,s)=>{try{p(I(e)),E(e,{config:s,hash:t})}catch{}},"writeConfigCache"),H=n(async e=>{const t=k(e);if(!t)return l({});const s=q(t),i=B(e);if(i){const g=N(i,s);if(g)return g}const h=t.slice(t.lastIndexOf(".")),a=o(F(),`vis-config-${s}${h}`);j(t,a);let c;try{c=await P(e,{fsCache:!1,moduleCache:!1}).import(a,{default:!0,try:!0})??{}}finally{try{b(a)}catch{}}let f;return f=l(typeof c=="function"?await c()??{}:c),i&&O(i,s,f),f},"loadVisConfig"),Y=n(e=>l(e),"defineConfig");export{A as CONFIG_FILES,J as SECURITY_DEFAULTS,l as applyDefaults,Y as defineConfig,k as findVisConfigFile,H as loadVisConfig};

package/dist/tui/components/update/PackageListPanel.d.ts

@@ -6,13 +6,16 @@ interface PackageListPanelProps {
     filterActive: boolean;
     filterText: string;
     filterType: FilterType;
+    filteredOutCount: number;
     focused: boolean;
     groupedByCatalog: Map<string, OutdatedEntry[]>;
     isDryRun: boolean;
     scrollOffset: number;
     selectedIndex: number;
+    totalCatalogEntries: number;
+    totalChecked: number;
     totalEntries: number;
     viewportHeight: number;
 }
-declare const PackageListPanel: ({ checkedEntries, entries, filterActive, filterText, filterType, focused, groupedByCatalog, isDryRun, scrollOffset, selectedIndex, totalEntries, viewportHeight, }: PackageListPanelProps) => React.JSX.Element;
+declare const PackageListPanel: ({ checkedEntries, entries, filterActive, filterText, filterType, filteredOutCount, focused, groupedByCatalog, isDryRun, scrollOffset, selectedIndex, totalCatalogEntries, totalChecked, totalEntries, viewportHeight, }: PackageListPanelProps) => React.JSX.Element;
 export default PackageListPanel;

package/dist/tui/components/update/VisUpdateApp.d.ts

@@ -1,11 +1,18 @@
 import React from "react";
+import type { OutdatedEntry } from "../../../catalog.d.ts";
 import type { UpdateStore } from "./UpdateStore.d.ts";
 interface VisUpdateAppProps {
     /** 0 = no auto-exit (default), >0 = countdown seconds */
     autoExitSeconds?: number;
     changelogUrls?: Map<string, string>;
+    /** Total unique packages checked by the registry. */
+    checkedCount?: number;
+    /** Total catalog entries (before deduplication). */
+    totalCatalogEntries?: number;
+    /** Packages that have newer versions but were filtered out by the target constraint. */
+    filteredOutEntries?: OutdatedEntry[];
     isDryRun: boolean;
     store: UpdateStore;
 }
-declare const VisUpdateApp: ({ autoExitSeconds, changelogUrls, isDryRun, store }: VisUpdateAppProps) => React.JSX.Element;
+declare const VisUpdateApp: ({ autoExitSeconds, changelogUrls, checkedCount, filteredOutEntries, isDryRun, store, totalCatalogEntries }: VisUpdateAppProps) => React.JSX.Element;
 export default VisUpdateApp;

package/dist/workspace.d.ts

@@ -274,6 +274,15 @@ interface VisConfig {
     };
     /** Update command defaults */
     update?: {
+        /**
+         * Dependency fields to scan for outdated packages.
+         * Beyond the standard fields, supports:
+         * - `"overrides"` (npm)
+         * - `"resolutions"` (yarn)
+         * - `"pnpm.overrides"`
+         * @default ["dependencies", "devDependencies", "optionalDependencies", "peerDependencies"]
+         */
+        depFields?: string[];
         exclude?: string[];
         format?: "json" | "minimal" | "table";
         /**
@@ -284,7 +293,38 @@ interface VisConfig {
          */
         ignore?: string[];
         include?: string[];
+        /**
+         * Include packages with pinned/exact versions (no `^` or `~` prefix).
+         * By default, pinned versions are skipped during update checks.
+         * @default false
+         */
+        includeLocked?: boolean;
         install?: boolean;
+        /**
+         * Minimum number of minutes since a version was published before
+         * vis will consider it for updates. This mirrors pnpm's
+         * `minimumReleaseAge` — a single setting that applies to both
+         * install and update.
+         *
+         * Not set by default. If your package manager config
+         * (`pnpm-workspace.yaml`) has `minimumReleaseAge`, vis will
+         * read it from there as a fallback.
+         * @example 1440 // 24 hours
+         */
+        minimumReleaseAge?: number;
+        /**
+         * Package names/patterns excluded from the minimumReleaseAge check.
+         * @example ["webpack", "@myorg/*"]
+         */
+        minimumReleaseAgeExclude?: string[];
+        /**
+         * Per-package or per-pattern update target overrides.
+         * Keys are exact package names, glob patterns, or regex patterns
+         * wrapped in `/` (e.g., `/^@vue/`).
+         * Values are `"latest"`, `"minor"`, or `"patch"`.
+         * @example { "typescript": "minor", "/^@vue/": "patch" }
+         */
+        packageMode?: Record<string, "latest" | "minor" | "patch">;
         prerelease?: boolean;
         security?: boolean;
         target?: "latest" | "minor" | "patch";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@visulima/vis",
-  "version": "1.0.0-alpha.4",
+  "version": "1.0.0-alpha.5",
   "description": "A CLI task runner for monorepo workspaces, powered by @visulima/task-runner",
   "keywords": [
     "visulima",
@@ -69,13 +69,13 @@
     "@visulima/package": "5.0.0-alpha.7",
     "@visulima/path": "3.0.0-alpha.8",
     "@visulima/task-runner": "1.0.0-alpha.4",
-    "@visulima/tui": "1.0.0-alpha.1",
+    "@visulima/tui": "1.0.0-alpha.2",
     "giget": "^3.2.0",
     "jiti": "^2.6.1",
     "lockparse": "^0.5.0",
     "module-replacements": "^2.11.0",
     "module-replacements-codemods": "^1.2.1",
-    "react": "19.2.4",
+    "react": "19.2.5",
     "semver": "^7.7.1",
     "validate-npm-package-name": "^7.0.2"
   },
@@ -88,14 +88,14 @@
     }
   },
   "optionalDependencies": {
-    "@visulima/vis-binding-darwin-arm64": "1.0.0-alpha.4",
-    "@visulima/vis-binding-darwin-x64": "1.0.0-alpha.4",
-    "@visulima/vis-binding-linux-arm64-gnu": "1.0.0-alpha.4",
-    "@visulima/vis-binding-linux-arm64-musl": "1.0.0-alpha.4",
-    "@visulima/vis-binding-linux-x64-gnu": "1.0.0-alpha.4",
-    "@visulima/vis-binding-win32-arm64-msvc": "1.0.0-alpha.4",
-    "@visulima/vis-binding-win32-x64-msvc": "1.0.0-alpha.4",
-    "@visulima/vis-binding-linux-x64-musl": "1.0.0-alpha.4"
+    "@visulima/vis-binding-darwin-arm64": "1.0.0-alpha.5",
+    "@visulima/vis-binding-linux-arm64-gnu": "1.0.0-alpha.5",
+    "@visulima/vis-binding-linux-arm64-musl": "1.0.0-alpha.5",
+    "@visulima/vis-binding-darwin-x64": "1.0.0-alpha.5",
+    "@visulima/vis-binding-linux-x64-gnu": "1.0.0-alpha.5",
+    "@visulima/vis-binding-linux-x64-musl": "1.0.0-alpha.5",
+    "@visulima/vis-binding-win32-arm64-msvc": "1.0.0-alpha.5",
+    "@visulima/vis-binding-win32-x64-msvc": "1.0.0-alpha.5"
   },
   "engines": {
     "node": ">=22.13 <=25.x"