autoremediator 0.21.2 → 0.22.0

package/dist/api/diet/replaceable.d.ts

@@ -0,0 +1,46 @@
+import { z } from "zod";
+import type { DependencySection, NodeRequirement, ReplaceableDependency } from "./types.js";
+declare const rowSchema: z.ZodObject<{
+    package: z.ZodString;
+    replacement: z.ZodString;
+    nodeRange: z.ZodString;
+    migration: z.ZodString;
+    fit: z.ZodEnum<{
+        "check-usage": "check-usage";
+        "drop-in": "drop-in";
+    }>;
+    caveat: z.ZodOptional<z.ZodString>;
+    coveredSymbols: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    example: z.ZodObject<{
+        after: z.ZodString;
+        result: z.ZodString;
+    }, z.core.$strict>;
+    source: z.ZodURL;
+}, z.core.$strict>;
+export type ReplacementRow = z.infer<typeof rowSchema>;
+/** The curated table, validated once: a malformed row is a build-time mistake and fails loudly. */
+export declare const REPLACEMENTS: readonly ReplacementRow[];
+export declare function replacementFor(packageName: string): ReplacementRow | undefined;
+/** Node floor from `engines.node`, else `.nvmrc` / `.node-version`; undefined when none is declared. */
+export declare function readNodeRequirement(
+/** The package itself first, then its workspace root: the first to declare a floor wins. */
+candidates: readonly {
+    dir: string;
+    manifest: {
+        engines?: unknown;
+    };
+}[], root: string): NodeRequirement | undefined;
+/** Does every Node version the project declares have the API? */
+export declare function nodeHas(requirement: NodeRequirement, availableRange: string): boolean;
+/**
+ * Judge each declared dependency against the table. `symbolsUsed` is what the source imports from
+ * the package (`*` when it cannot be told); rows with `coveredSymbols` only apply when every
+ * imported symbol is one the replacement covers.
+ */
+export declare function findReplaceable(declared: readonly {
+    name: string;
+    section: DependencySection;
+    range: string;
+}[], requirement: NodeRequirement | undefined, symbolsUsed: (name: string) => ReadonlySet<string> | undefined): ReplaceableDependency[];
+export {};
+//# sourceMappingURL=replaceable.d.ts.map

package/dist/api/diet/replaceable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"replaceable.d.ts","sourceRoot":"","sources":["../../../src/api/diet/replaceable.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EACV,iBAAiB,EACjB,eAAe,EACf,qBAAqB,EAEtB,MAAM,YAAY,CAAC;AAEpB,QAAA,MAAM,SAAS;;;;;;;;;;;;;;;;kBAcJ,CAAC;AAMZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAEvD,mGAAmG;AACnG,eAAO,MAAM,YAAY,EAAE,SAAS,cAAc,EAA0C,CAAC;AAI7F,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAE9E;AAED,wGAAwG;AACxG,wBAAgB,mBAAmB;AACjC,4FAA4F;AAC5F,UAAU,EAAE,SAAS;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CAAE,EAAE,EACvE,IAAI,EAAE,MAAM,GACX,eAAe,GAAG,SAAS,CAoB7B;AAED,iEAAiE;AACjE,wBAAgB,OAAO,CAAC,WAAW,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAMrF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,iBAAiB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAAE,EAChF,WAAW,EAAE,eAAe,GAAG,SAAS,EACxC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,WAAW,CAAC,MAAM,CAAC,GAAG,SAAS,GAC7D,qBAAqB,EAAE,CA0CzB"}

package/dist/api/diet/replaceable.js

@@ -0,0 +1,115 @@
+import { existsSync, readFileSync } from "node:fs";
+import { join, relative } from "node:path";
+import semver from "semver";
+import { z } from "zod";
+import table from "./replaceable.json" with { type: "json" };
+const rowSchema = z
+    .object({
+    package: z.string().min(1),
+    replacement: z.string().min(1),
+    nodeRange: z
+        .string()
+        .refine((range) => semver.validRange(range) !== null, "nodeRange must be a semver range"),
+    migration: z.string().min(1),
+    fit: z.enum(["drop-in", "check-usage"]),
+    caveat: z.string().optional(),
+    coveredSymbols: z.array(z.string().min(1)).optional(),
+    example: z.object({ after: z.string().min(1), result: z.string() }).strict(),
+    source: z.url(),
+})
+    .strict();
+const tableSchema = z
+    .object({ version: z.literal(1), about: z.string(), replacements: z.array(rowSchema).min(1) })
+    .strict();
+/** The curated table, validated once: a malformed row is a build-time mistake and fails loudly. */
+export const REPLACEMENTS = tableSchema.parse(table).replacements;
+const BY_PACKAGE = new Map(REPLACEMENTS.map((row) => [row.package, row]));
+export function replacementFor(packageName) {
+    return BY_PACKAGE.get(packageName);
+}
+/** Node floor from `engines.node`, else `.nvmrc` / `.node-version`; undefined when none is declared. */
+export function readNodeRequirement(
+/** The package itself first, then its workspace root: the first to declare a floor wins. */
+candidates, root) {
+    for (const { dir, manifest } of candidates) {
+        const engines = manifest.engines;
+        if (engines && typeof engines === "object") {
+            const range = engines.node;
+            if (typeof range === "string" && semver.validRange(range) !== null) {
+                return { range, source: "engines.node", file: relative(root, join(dir, "package.json")) };
+            }
+        }
+        for (const name of [".nvmrc", ".node-version"]) {
+            const file = join(dir, name);
+            if (!existsSync(file))
+                continue;
+            const pinned = readFileSync(file, "utf8").split("\n")[0]?.trim().replace(/^v/, "") ?? "";
+            // `lts/*`, `node` and other aliases do not name a version, so no floor can be claimed.
+            if (!/^\d+(\.\d+){0,2}$/.test(pinned))
+                continue;
+            const floor = semver.coerce(pinned)?.version;
+            if (floor)
+                return { range: `>=${floor}`, source: name, file: relative(root, file) };
+        }
+    }
+    return undefined;
+}
+/** Does every Node version the project declares have the API? */
+export function nodeHas(requirement, availableRange) {
+    try {
+        return semver.subset(requirement.range, availableRange);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Judge each declared dependency against the table. `symbolsUsed` is what the source imports from
+ * the package (`*` when it cannot be told); rows with `coveredSymbols` only apply when every
+ * imported symbol is one the replacement covers.
+ */
+export function findReplaceable(declared, requirement, symbolsUsed) {
+    const found = [];
+    for (const dependency of declared) {
+        const row = BY_PACKAGE.get(dependency.name);
+        if (!row)
+            continue;
+        let status;
+        let reason;
+        const used = symbolsUsed(dependency.name);
+        const uncovered = row.coveredSymbols
+            ? [...(used ?? [])].filter((symbol) => !row.coveredSymbols.includes(symbol))
+            : [];
+        if (uncovered.length > 0) {
+            status = "not-covered";
+            reason = `the source imports ${uncovered.map((symbol) => (symbol === "*" ? "the whole module" : symbol)).join(", ")}, but ${row.replacement} replaces only ${row.coveredSymbols.join(", ")}`;
+        }
+        else if (!requirement) {
+            status = "unknown-node";
+            reason = `${row.replacement} needs Node ${row.nodeRange}, and the project declares no minimum (set engines.node)`;
+        }
+        else if (nodeHas(requirement, row.nodeRange)) {
+            status = "replaceable";
+            reason = `the project declares Node ${requirement.range} (${requirement.source}); ${row.replacement} is in Node ${row.nodeRange}`;
+        }
+        else {
+            status = "blocked-by-node";
+            reason = `the project declares Node ${requirement.range} (${requirement.source}), which includes versions without ${row.replacement} (Node ${row.nodeRange})`;
+        }
+        found.push({
+            name: dependency.name,
+            section: dependency.section,
+            range: dependency.range,
+            status,
+            replacement: row.replacement,
+            nodeRange: row.nodeRange,
+            migration: row.migration,
+            fit: row.fit,
+            ...(row.caveat ? { caveat: row.caveat } : {}),
+            reason,
+            source: row.source,
+        });
+    }
+    return found;
+}
+//# sourceMappingURL=replaceable.js.map

package/dist/api/diet/replaceable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replaceable.js","sourceRoot":"","sources":["../../../src/api/diet/replaceable.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,MAAM,oBAAoB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAQ7D,MAAM,SAAS,GAAG,CAAC;KAChB,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,kCAAkC,CAAC;IAC3F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAC5E,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE;CAChB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,WAAW,GAAG,CAAC;KAClB,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7F,MAAM,EAAE,CAAC;AAIZ,mGAAmG;AACnG,MAAM,CAAC,MAAM,YAAY,GAA8B,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC;AAE7F,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AAE1E,MAAM,UAAU,cAAc,CAAC,WAAmB;IAChD,OAAO,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AACrC,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,mBAAmB;AACjC,4FAA4F;AAC5F,UAAuE,EACvE,IAAY;IAEZ,KAAK,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,UAAU,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QACjC,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAI,OAA8B,CAAC,IAAI,CAAC;YACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;gBACnE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;YAC5F,CAAC;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAU,EAAE,CAAC;YACxD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC7B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,SAAS;YAChC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;YACzF,uFAAuF;YACvF,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,SAAS;YAChD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;YAC7C,IAAI,KAAK;gBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QACtF,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,OAAO,CAAC,WAA4B,EAAE,cAAsB;IAC1E,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAgF,EAChF,WAAwC,EACxC,WAA8D;IAE9D,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,KAAK,MAAM,UAAU,IAAI,QAAQ,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG;YAAE,SAAS;QAEnB,IAAI,MAAyB,CAAC;QAC9B,IAAI,MAAc,CAAC;QACnB,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,GAAG,CAAC,cAAc;YAClC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,cAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC7E,CAAC,CAAC,EAAE,CAAC;QAEP,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,GAAG,aAAa,CAAC;YACvB,MAAM,GAAG,sBAAsB,SAAS,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,WAAW,kBAAkB,GAAG,CAAC,cAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChM,CAAC;aAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,GAAG,cAAc,CAAC;YACxB,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,eAAe,GAAG,CAAC,SAAS,0DAA0D,CAAC;QACpH,CAAC;aAAM,IAAI,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/C,MAAM,GAAG,aAAa,CAAC;YACvB,MAAM,GAAG,6BAA6B,WAAW,CAAC,KAAK,KAAK,WAAW,CAAC,MAAM,MAAM,GAAG,CAAC,WAAW,eAAe,GAAG,CAAC,SAAS,EAAE,CAAC;QACpI,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,iBAAiB,CAAC;YAC3B,MAAM,GAAG,6BAA6B,WAAW,CAAC,KAAK,KAAK,WAAW,CAAC,MAAM,sCAAsC,GAAG,CAAC,WAAW,UAAU,GAAG,CAAC,SAAS,GAAG,CAAC;QAChK,CAAC;QAED,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,MAAM;YACN,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,MAAM;YACN,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/api/diet/replaceable.json

@@ -0,0 +1,168 @@
+{
+    "version": 1,
+    "about": "Packages whose job a Node built-in or platform API now does. Each row names the API, the Node versions that have it (nodeRange, checked against nodejs.org API history and MDN browser-compat-data), and a one-line migration. Add a row only when the replacement is certain; say what differs in caveat. Rows with fit check-usage change behaviour for some calls and need a read before migrating.",
+    "replacements": [
+        {
+            "package": "left-pad",
+            "replacement": "String.prototype.padStart",
+            "nodeRange": ">=8.0.0",
+            "migration": "leftPad(str, len, ch)  ->  String(str).padStart(len, ch)",
+            "fit": "drop-in",
+            "caveat": "left-pad accepts non-strings and numbers; wrap the first argument in String(). Identical for a one-character fill; with a multi-character fill left-pad repeats the whole fill per missing character (leftPad('x', 5, 'ab') is 'ababababx'), where padStart cuts it to length ('ababx').",
+            "example": { "after": "String(5).padStart(3, '0')", "result": "005" },
+            "source": "https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/String/padStart"
+        },
+        {
+            "package": "is-number",
+            "replacement": "Number.isFinite",
+            "nodeRange": ">=0.10.0",
+            "migration": "isNumber(x)  ->  Number.isFinite(x)  (numbers only)",
+            "fit": "check-usage",
+            "caveat": "is-number also returns true for numeric strings such as '5'. If callers pass strings, use typeof x === 'string' && x.trim() !== '' && Number.isFinite(Number(x)) as well.",
+            "example": {
+                "after": "String([Number.isFinite(5), Number.isFinite(NaN), Number.isFinite(Infinity)])",
+                "result": "true,false,false"
+            },
+            "source": "https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Number/isFinite"
+        },
+        {
+            "package": "isarray",
+            "replacement": "Array.isArray",
+            "nodeRange": ">=0.10.0",
+            "migration": "isArray(x)  ->  Array.isArray(x)",
+            "fit": "drop-in",
+            "example": {
+                "after": "String([Array.isArray([]), Array.isArray({})])",
+                "result": "true,false"
+            },
+            "source": "https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Array/isArray"
+        },
+        {
+            "package": "array-flatten",
+            "replacement": "Array.prototype.flat",
+            "nodeRange": ">=11.0.0",
+            "migration": "flatten(arr)  ->  arr.flat(Infinity);  flatten(arr, depth) (v1, v2)  ->  arr.flat(depth)",
+            "fit": "check-usage",
+            "caveat": "flat() exists on arrays only: array-like input such as arguments needs Array.from() first. flat() also drops holes in sparse arrays.",
+            "example": {
+                "after": "JSON.stringify([1, [2, [3, [4]]]].flat(Infinity))",
+                "result": "[1,2,3,4]"
+            },
+            "source": "https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Array/flat"
+        },
+        {
+            "package": "object-assign",
+            "replacement": "Object.assign",
+            "nodeRange": ">=4.0.0",
+            "migration": "objectAssign(target, ...sources)  ->  Object.assign(target, ...sources)",
+            "fit": "drop-in",
+            "example": {
+                "after": "JSON.stringify(Object.assign({ a: 1 }, { b: 2 }))",
+                "result": "{\"a\":1,\"b\":2}"
+            },
+            "source": "https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Object/assign"
+        },
+        {
+            "package": "globalthis",
+            "replacement": "globalThis",
+            "nodeRange": ">=12.0.0",
+            "migration": "require('globalthis')()  ->  globalThis",
+            "fit": "drop-in",
+            "example": { "after": "String(globalThis === global)", "result": "true" },
+            "source": "https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/globalThis"
+        },
+        {
+            "package": "has",
+            "replacement": "Object.hasOwn",
+            "nodeRange": ">=16.9.0",
+            "migration": "has(obj, key)  ->  Object.hasOwn(obj, key)",
+            "fit": "drop-in",
+            "example": {
+                "after": "String([Object.hasOwn({ a: 1 }, 'a'), Object.hasOwn({ a: 1 }, 'toString')])",
+                "result": "true,false"
+            },
+            "source": "https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Object/hasOwn"
+        },
+        {
+            "package": "rimraf",
+            "replacement": "fs.rm",
+            "nodeRange": ">=14.14.0",
+            "migration": "rimraf(path)  ->  fs.promises.rm(path, { recursive: true, force: true });  rimraf.sync(path)  ->  fs.rmSync(path, { recursive: true, force: true });  CLI: rimraf dist  ->  node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\"",
+            "fit": "check-usage",
+            "caveat": "rimraf v4+ also expands glob patterns and retries on Windows locks; fs.rm does neither. Check the call sites for globs.",
+            "example": { "after": "typeof require('node:fs').rmSync", "result": "function" },
+            "source": "https://nodejs.org/api/fs.html#fsrmpath-options-callback"
+        },
+        {
+            "package": "mkdirp",
+            "replacement": "fs.mkdir with { recursive: true }",
+            "nodeRange": ">=10.12.0",
+            "migration": "mkdirp(dir)  ->  fs.promises.mkdir(dir, { recursive: true });  mkdirp.sync(dir)  ->  fs.mkdirSync(dir, { recursive: true })",
+            "fit": "drop-in",
+            "example": { "after": "typeof require('node:fs').mkdirSync", "result": "function" },
+            "source": "https://nodejs.org/api/fs.html#fsmkdirpath-options-callback"
+        },
+        {
+            "package": "make-dir",
+            "replacement": "fs.mkdir with { recursive: true }",
+            "nodeRange": ">=10.12.0",
+            "migration": "makeDir(dir)  ->  fs.promises.mkdir(dir, { recursive: true })",
+            "fit": "check-usage",
+            "caveat": "make-dir resolves to the directory path; fs.promises.mkdir resolves to the first directory it created (or undefined). Check whether callers use the result.",
+            "example": { "after": "typeof require('node:fs').promises.mkdir", "result": "function" },
+            "source": "https://nodejs.org/api/fs.html#fspromisesmkdirpath-options"
+        },
+        {
+            "package": "uuid",
+            "replacement": "crypto.randomUUID",
+            "nodeRange": ">=14.17.0 <15.0.0 || >=15.6.0",
+            "migration": "import { v4 as uuidv4 } from 'uuid'; uuidv4()  ->  import { randomUUID } from 'node:crypto'; randomUUID()",
+            "fit": "drop-in",
+            "coveredSymbols": ["v4"],
+            "caveat": "Only version 4 UUIDs. uuid's v1, v3, v5, v6, v7 and validate/parse have no Node equivalent, so the package is reported as replaceable only when v4 is the only export the source imports.",
+            "example": {
+                "after": "String(/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/.test(require('node:crypto').randomUUID()))",
+                "result": "true"
+            },
+            "source": "https://nodejs.org/api/crypto.html#cryptorandomuuidoptions"
+        },
+        {
+            "package": "node-fetch",
+            "replacement": "global fetch",
+            "nodeRange": ">=21.0.0",
+            "migration": "import fetch from 'node-fetch'; await fetch(url)  ->  await fetch(url)",
+            "fit": "check-usage",
+            "caveat": "fetch is available without a flag from Node 18.0.0 but is stable (no ExperimentalWarning) from 21.0.0, which is the floor used here. The response body is a web ReadableStream, not a Node stream, and node-fetch's agent option and response.buffer() do not exist.",
+            "example": { "after": "typeof fetch", "result": "function" },
+            "source": "https://nodejs.org/api/globals.html#fetch"
+        },
+        {
+            "package": "abort-controller",
+            "replacement": "global AbortController",
+            "nodeRange": ">=15.4.0",
+            "migration": "import AbortController from 'abort-controller'  ->  remove the import; use the global AbortController",
+            "fit": "drop-in",
+            "example": { "after": "typeof AbortController", "result": "function" },
+            "source": "https://nodejs.org/api/globals.html#class-abortcontroller"
+        },
+        {
+            "package": "pify",
+            "replacement": "util.promisify",
+            "nodeRange": ">=8.0.0",
+            "migration": "pify(fn)  ->  util.promisify(fn)",
+            "fit": "check-usage",
+            "caveat": "pify also wraps every method of an object and supports multiArgs and includeSync options; util.promisify wraps one function. Check the call sites for those.",
+            "example": { "after": "typeof require('node:util').promisify", "result": "function" },
+            "source": "https://nodejs.org/api/util.html#utilpromisifyoriginal"
+        },
+        {
+            "package": "os-homedir",
+            "replacement": "os.homedir",
+            "nodeRange": ">=2.3.0",
+            "migration": "osHomedir()  ->  os.homedir()",
+            "fit": "drop-in",
+            "example": { "after": "typeof require('node:os').homedir()", "result": "string" },
+            "source": "https://nodejs.org/api/os.html#oshomedir"
+        }
+    ]
+}

package/dist/api/diet/scan.d.ts

@@ -0,0 +1,43 @@
+import { type PackageFiles } from "./files.js";
+export type ReferenceKind = "import" | "type-import" | "require" | "dynamic-import" | "resolve" | "reference";
+export interface PackageReference {
+    kinds: Set<ReferenceKind>;
+    /** Exports taken from the package: names, `default`, or `*` when the whole module is used or it cannot be told. */
+    symbols: Set<string>;
+    /** First few files, relative to the package directory. */
+    files: string[];
+}
+/** What one package directory's files say about which dependencies they use. */
+export interface PackageUsage {
+    /** Direct imports, requires, resolves and type references, by root package name. */
+    references: Map<string, PackageReference>;
+    /** A package name appears as a string (a mock path, a plugin list, a dynamic specifier). */
+    mentions: Map<string, string[]>;
+    /** Config, CI and script text: every token and where it was first seen. */
+    tokens: Map<string, string>;
+    /** Files that load a module by a name only known at runtime. */
+    dynamicLoadFiles: string[];
+    /** Files that could not be parsed or read in full. */
+    unparsedFiles: string[];
+    sourceFiles: number;
+    configFiles: number;
+}
+export declare function emptyUsage(): PackageUsage;
+/**
+ * Parse one JavaScript or TypeScript file and record every way it can name a dependency. The
+ * `interesting` set is the declared dependency names, so only those strings are kept as mentions.
+ */
+export declare function scanSource(usage: PackageUsage, path: string, content: string, interesting: ReadonlySet<string>, filename?: string): void;
+/** Any quoted occurrence of a declared package name in raw text. */
+export declare function textMentions(usage: PackageUsage, path: string, text: string, interesting: ReadonlySet<string>): void;
+/** Word-like tokens of a config, CI or script text, normalised the way a shell or loader would read them. */
+export declare function tokensOf(text: string): string[];
+/** Scan every file of one package directory into `usage`. */
+export declare function scanPackage(packageDir: string, interesting: ReadonlySet<string>, options?: {
+    excludeDirectories?: ReadonlySet<string>;
+    gitignoreRoots?: readonly string[];
+}, into?: PackageUsage): {
+    usage: PackageUsage;
+    files: PackageFiles;
+};
+//# sourceMappingURL=scan.d.ts.map

package/dist/api/diet/scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../../../src/api/diet/scan.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiC,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAE9E,MAAM,MAAM,aAAa,GACrB,QAAQ,GACR,aAAa,GACb,SAAS,GACT,gBAAgB,GAChB,SAAS,GACT,WAAW,CAAC;AAEhB,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;IAC1B,mHAAmH;IACnH,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACrB,0DAA0D;IAC1D,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,gFAAgF;AAChF,MAAM,WAAW,YAAY;IAC3B,oFAAoF;IACpF,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC1C,4FAA4F;IAC5F,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAChC,2EAA2E;IAC3E,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,gEAAgE;IAChE,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,sDAAsD;IACtD,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,UAAU,IAAI,YAAY,CAUzC;AAkID;;;GAGG;AACH,wBAAgB,UAAU,CACxB,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,EAChC,QAAQ,GAAE,MAAa,GACtB,IAAI,CAwKN;AAED,oEAAoE;AACpE,wBAAgB,YAAY,CAC1B,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,GAC/B,IAAI,CAMN;AAED,6GAA6G;AAC7G,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAe/C;AAED,6DAA6D;AAC7D,wBAAgB,WAAW,CACzB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,EAChC,OAAO,GAAE;IAAE,kBAAkB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAO,EAC9F,IAAI,GAAE,YAA2B,GAChC;IAAE,KAAK,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,YAAY,CAAA;CAAE,CAyB9C"}