deepbom 2.0.0 → 2.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +39 -6
- package/bin/deepbom.mjs +64 -64
- package/package.json +11 -1
- package/pkg/release-manifest.json +3 -3
- package/pkg/tflite_wasm_audit_bg.wasm +0 -0
- package/sdk/index.d.mts +62 -0
- package/sdk/index.mjs +172 -0
package/README.md
CHANGED
|
@@ -3,14 +3,47 @@
|
|
|
3
3
|
Local deployment-artifact analysis for TFLite, ONNX, GGUF, SafeTensors, Core ML,
|
|
4
4
|
and ExecuTorch.
|
|
5
5
|
|
|
6
|
+
## Programmatic integration
|
|
7
|
+
|
|
8
|
+
The Node/TypeScript SDK is available from version **2.1.0**:
|
|
9
|
+
|
|
10
|
+
```sh
|
|
11
|
+
npm install deepbom@2.1.0
|
|
12
|
+
```
|
|
13
|
+
|
|
14
|
+
Follow the [integration walkthrough](https://github.com/JunHwan-Kwon/deepbom/blob/main/examples/integrations/README.md)
|
|
15
|
+
for runnable exporter, MLflow and release-review examples.
|
|
16
|
+
|
|
17
|
+
```js
|
|
18
|
+
import { inspect, audit, DeepBomPolicyBlocked } from "deepbom";
|
|
19
|
+
|
|
20
|
+
const summary = await inspect("model.onnx");
|
|
21
|
+
console.log(summary.artifact.sha256, summary.coverage);
|
|
22
|
+
try {
|
|
23
|
+
const evidence = await audit("model.onnx", { gate: "defects" });
|
|
24
|
+
// Store this native evidence; apply deployment policy separately.
|
|
25
|
+
} catch (error) {
|
|
26
|
+
if (!(error instanceof DeepBomPolicyBlocked)) throw error;
|
|
27
|
+
console.log(error.code, error.document);
|
|
28
|
+
}
|
|
29
|
+
```
|
|
30
|
+
|
|
31
|
+
This is an asynchronous ESM API for Node >=20 that invokes the bundled CLI
|
|
32
|
+
without a shell or engine download. It reuses the common analysis engine and
|
|
33
|
+
ships TypeScript declarations. Python uses the same engine in its wheel.
|
|
34
|
+
See the [SDK contract](https://github.com/JunHwan-Kwon/deepbom/blob/main/docs/SDK_CONTRACT.md)
|
|
35
|
+
for supported options, structured errors and independent IR versioning.
|
|
36
|
+
|
|
37
|
+
## Command line
|
|
38
|
+
|
|
6
39
|
For a local Codex or Claude Code project, preview and install the bundled Agent
|
|
7
40
|
Skill without operating an analysis server:
|
|
8
41
|
|
|
9
42
|
```console
|
|
10
|
-
npx -y deepbom@2.
|
|
11
|
-
npx -y deepbom@2.
|
|
12
|
-
npx -y deepbom@2.
|
|
13
|
-
npx -y deepbom@2.
|
|
43
|
+
npx -y deepbom@2.1.0 integrate codex
|
|
44
|
+
npx -y deepbom@2.1.0 integrate codex --apply
|
|
45
|
+
npx -y deepbom@2.1.0 integrate claude-code
|
|
46
|
+
npx -y deepbom@2.1.0 integrate claude-code --apply
|
|
14
47
|
```
|
|
15
48
|
|
|
16
49
|
```console
|
|
@@ -28,10 +61,10 @@ npx deepbom explore model.tflite --target-profile target-profile.json
|
|
|
28
61
|
npx deepbom audit model.pte --executorch-build deepbom.executorch-build.json --compact
|
|
29
62
|
npx deepbom capabilities --format agent-json
|
|
30
63
|
npx deepbom capabilities --format agent-text
|
|
31
|
-
npx -y deepbom@2.
|
|
64
|
+
npx -y deepbom@2.1.0 mcp
|
|
32
65
|
```
|
|
33
66
|
|
|
34
|
-
Claude Desktop can install the version-matched `deepbom-2.
|
|
67
|
+
Claude Desktop can install the version-matched `deepbom-2.1.0.mcpb` asset
|
|
35
68
|
from the corresponding GitHub Release as a local desktop extension.
|
|
36
69
|
|
|
37
70
|
ChatGPT developer-mode users can connect `https://deepbom.org/mcp` for one
|