dsh-meta-analysis 0.1.0 → 0.1.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +7 -3
- package/SECURITY.md +19 -0
- package/THIRD_PARTY_NOTICES.md +10 -0
- package/lib/version.d.ts +1 -1
- package/lib/version.js +1 -1
- package/package.json +5 -3
- package/src/version.ts +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -4,7 +4,13 @@ All notable changes to this project are documented here. The format follows
|
|
|
4
4
|
[Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project
|
|
5
5
|
adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
|
6
6
|
|
|
7
|
-
## [
|
|
7
|
+
## [0.1.1] - 2026-11-08
|
|
8
|
+
|
|
9
|
+
### Changed
|
|
10
|
+
|
|
11
|
+
- Release-engineering refresh: CHANGELOG accuracy, package metadata and authors; no runtime changes.
|
|
12
|
+
|
|
13
|
+
## [0.1.0] - 2026-11-08
|
|
8
14
|
|
|
9
15
|
### Fixed
|
|
10
16
|
|
|
@@ -24,8 +30,6 @@ adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
|
|
24
30
|
malformed `ma_report` payloads and the function-plugin mount contract (21
|
|
25
31
|
tests total).
|
|
26
32
|
|
|
27
|
-
## [0.1.0] - 2026-11-08
|
|
28
|
-
|
|
29
33
|
First release: meta-analysis arithmetic.
|
|
30
34
|
|
|
31
35
|
### Added
|
package/SECURITY.md
ADDED
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
# Security policy
|
|
2
|
+
|
|
3
|
+
## Supported versions
|
|
4
|
+
|
|
5
|
+
The latest published `0.1.x` release of this package receives security fixes.
|
|
6
|
+
|
|
7
|
+
## Reporting a vulnerability
|
|
8
|
+
|
|
9
|
+
Please use GitHub's private vulnerability reporting (Security → Advisories) on
|
|
10
|
+
the repository, or open a minimal issue asking for a private channel if
|
|
11
|
+
advisories are unavailable. Do not include credentials, personal data or
|
|
12
|
+
working exploits in a public issue.
|
|
13
|
+
|
|
14
|
+
## Scope notes
|
|
15
|
+
|
|
16
|
+
- This package performs local file analysis only unless its README documents a
|
|
17
|
+
network provider; when it does, only the documented hosts are contacted.
|
|
18
|
+
- Inputs are treated as untrusted data: document text is never executed.
|
|
19
|
+
- No secrets are read or written by the package.
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
# Third-party notices
|
|
2
|
+
|
|
3
|
+
This package contains **no third-party runtime code**: `dependencies` is empty.
|
|
4
|
+
|
|
5
|
+
Development-only tooling (TypeScript, Vitest, `@deepseek-ai/*` type packages and
|
|
6
|
+
the shared `@perrylink/dsh-research-core` peer, when present) is not bundled and
|
|
7
|
+
is not distributed in the published tarball.
|
|
8
|
+
|
|
9
|
+
If that ever changes, the affected license texts must be added here before a
|
|
10
|
+
release.
|
package/lib/version.d.ts
CHANGED
package/lib/version.js
CHANGED
package/package.json
CHANGED
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "dsh-meta-analysis",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.1",
|
|
4
4
|
"description": "Meta-analysis arithmetic for DeepSeek Harness: effect-size conversions (OR/RR/d/r/SMD, SE from CI) with named formulas, fixed-effect and DerSimonian-Laird random-effects pooling, Q/df/p, I2, tau2, forest-plot data, Markdown/SARIF reports and a light Egger test for k >= 10. Local, dependency-free, reproducible from the inputs.",
|
|
5
|
-
"author": "
|
|
5
|
+
"author": "PerryLink contributors",
|
|
6
6
|
"repository": {
|
|
7
7
|
"type": "git",
|
|
8
8
|
"url": "git+https://github.com/PerryLink/dsh-meta-analysis.git"
|
|
@@ -29,7 +29,9 @@
|
|
|
29
29
|
"CHANGELOG.md",
|
|
30
30
|
"README.md",
|
|
31
31
|
"README-zh.md",
|
|
32
|
-
"LICENSE"
|
|
32
|
+
"LICENSE",
|
|
33
|
+
"SECURITY.md",
|
|
34
|
+
"THIRD_PARTY_NOTICES.md"
|
|
33
35
|
],
|
|
34
36
|
"sideEffects": false,
|
|
35
37
|
"dsh": {
|
package/src/version.ts
CHANGED