cornhsu-polymigrate 2.0.1 → 2.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 許彧銘 Hsu Yu-Ming (Cornhsu)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -13,12 +13,16 @@ PolyMigrate turns legacy dynamic sites (old PHP sites and the like) into clean,
 Markdown — and it treats multilingual content as a first-class concern, not an afterthought.
 Config-driven, fully offline-rerunnable, built on .NET.
 
-**Status: 2.0.** The extraction pipeline, pairing, verification, thumbnails and orphan-page
+**Status: 2.2.** The extraction pipeline, pairing, verification, thumbnails and orphan-page
 recovery are complete and validated against a real full-site migration (see below). The **CLI
 surface and the Phase output contracts remain stable** (unchanged since 1.0): new features bump
-the minor version, fixes bump the patch. 2.0 is an engineering release — it narrowed the
+the minor version, fixes bump the patch. 2.0 was an engineering release — it narrowed the
 `Cornhsu.PolyMigrate.Core` public .NET API to its intended entry points and removed unused
-config fields; see the [CHANGELOG](CHANGELOG.md) for the migration notes.
+config fields; 2.1 fixed up the release pipeline (arm64 npm packages, symbol packages).
+2.2 closed a blind spot in `verify` — pages nothing links to were reported as fine, because a
+link-following audit never reaches them — and added `slugs` for keeping up with a source site
+that is still being updated. **Upgrading to 2.2 can turn a passing `verify` into exit 1**;
+see the [CHANGELOG](CHANGELOG.md) for that and the other migration notes.
 
 ## Why
 
@@ -94,10 +98,11 @@ dotnet tool install -g Cornhsu.PolyMigrate  # .NET
 ```
 dotnet tool install -g Cornhsu.PolyMigrate
 polymigrate extract site.yaml               # mirror HTML -> frontmatter Markdown + inventories
-polymigrate verify out/                     # link/media/frontmatter audit, CI-friendly exit codes
+polymigrate verify out/                     # link/media/frontmatter/unlinked-page audit, CI exit codes
 polymigrate thumbs site.yaml                # EXIF-corrected, width-capped thumbnails
 polymigrate probe-orphans site.yaml --section news --years 2021-2023
 polymigrate fetch-orphans site.yaml --section news
+polymigrate slugs . --section news          # slugs already mirrored under ./raw (pipeable)
 ```
 
 > No .NET? Every command above also runs with **zero install** via npm — just prefix it:
@@ -160,4 +165,9 @@ dotnet run --project src/PolyMigrate.Cli -- --help
 
 License: [MIT](LICENSE). All dependencies are MIT/BSD/Apache-2.0
 (imaging via **Magick.NET**; ImageSharp was dropped when its 4.x line began requiring a
-license key at build time).
+license key at build time). See [THIRD-PARTY-NOTICES](THIRD-PARTY-NOTICES.md).
+
+PolyMigrate fetches pages from the site you point it at, and can be configured to send
+cookies past a bot challenge. **It assumes the site is yours, or that you are migrating
+it with the owner's permission** — that is what it is for. Check the source site's terms
+before pointing it at anything else.

package/THIRD-PARTY-NOTICES.md

@@ -0,0 +1,49 @@
+# Third-party notices
+
+PolyMigrate itself is licensed under the [MIT License](LICENSE). It builds on the
+following third-party packages. All of their licences are compatible with MIT, and
+none of them are copyleft.
+
+| Package | Licence | Project |
+|---|---|---|
+| AngleSharp | MIT | https://anglesharp.github.io/ |
+| ReverseMarkdown | MIT | https://github.com/mysticmind/reversemarkdown-net |
+| YamlDotNet | MIT | https://github.com/aaubry/YamlDotNet |
+| Magick.NET (`Magick.NET-Q8-AnyCPU`, `Magick.NET.Core`) | Apache-2.0 | https://github.com/dlemstra/Magick.NET |
+
+## Why this file exists
+
+For the NuGet packages (`Cornhsu.PolyMigrate`, `Cornhsu.PolyMigrate.Core`) the
+dependencies are resolved by NuGet and each package carries its own licence — nothing
+further is required from us.
+
+**The npm channel is different.** `cornhsu-polymigrate` ships a self-contained native
+binary that embeds `Magick.Native-Q8-*` directly, which makes it a redistribution of
+Magick.NET and of ImageMagick. Magick.NET is Apache-2.0 and its package includes a
+`Notice.txt`, so section 4(d) of the Apache License applies: that notice must travel
+with the redistribution.
+
+## Magick.NET / ImageMagick
+
+> Copyright Dirk Lemstra, https://github.com/dlemstra/Magick.NET
+> Licensed under the Apache License, Version 2.0.
+>
+> Bundles ImageMagick, used under the ImageMagick License —
+> https://imagemagick.org/license/
+
+The full, authoritative notice ships inside the Magick.NET package as `Notice.txt`
+(and covers the exact ImageMagick version bundled by that release). Reproduce that
+file, not this summary, when redistributing.
+
+**This is automated, not a checklist item.** `npm/prepare.mjs` resolves the actual
+Magick.NET version from `project.assets.json`, reads `Notice.txt` from the NuGet cache,
+and writes it into every platform package as `NOTICE.txt` — **aborting the build if it
+cannot find it**. `release.yml` then verifies the built packages really carry it. A
+licence obligation that depends on someone remembering a checklist is one that will
+eventually be missed.
+
+## Keeping this current
+
+This file lists licences as of the versions pinned in `src/*/*.csproj`. **When a
+dependency is added, removed, or bumped to a version with a different licence, update
+this file in the same commit** — Dependabot bumps will not do it for you.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cornhsu-polymigrate",
-  "version": "2.0.1",
+  "version": "2.2.0",
   "description": "The i18n-first static-site migrator — the only one that pairs your multilingual pages automatically. Mirrors a legacy site into frontmatter Markdown, auto-matches language versions, and honestly lists what it could not pair.",
   "keywords": [
     "i18n",
@@ -29,15 +29,18 @@
   },
   "files": [
     "bin/polymigrate.js",
-    "README.md"
+    "README.md",
+    "THIRD-PARTY-NOTICES.md"
   ],
   "engines": {
     "node": ">=18"
   },
   "optionalDependencies": {
-    "@cornhsu/polymigrate-win32-x64": "2.0.1",
-    "@cornhsu/polymigrate-linux-x64": "2.0.1",
-    "@cornhsu/polymigrate-darwin-x64": "2.0.1",
-    "@cornhsu/polymigrate-darwin-arm64": "2.0.1"
+    "@cornhsu/polymigrate-win32-x64": "2.2.0",
+    "@cornhsu/polymigrate-win32-arm64": "2.2.0",
+    "@cornhsu/polymigrate-linux-x64": "2.2.0",
+    "@cornhsu/polymigrate-linux-arm64": "2.2.0",
+    "@cornhsu/polymigrate-darwin-x64": "2.2.0",
+    "@cornhsu/polymigrate-darwin-arm64": "2.2.0"
   }
 }