flaglint 0.5.0 → 0.5.2

package/CHANGELOG.md

@@ -7,6 +7,38 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## Unreleased
 
+## [0.5.2] - 2026-05-27
+
+### Fixed
+
+- Fixed LaunchDarkly client provenance for aliased named `init` imports from both
+  supported Node.js server SDK package names. Calls initialized via
+  `import { init as ldInit } from "@launchdarkly/node-server-sdk"` or legacy
+  `launchdarkly-node-server-sdk` are now consistently detected by `scan`,
+  enforced by `validate --no-direct-launchdarkly`, emitted in validation SARIF,
+  and handled by existing guarded migration dry-run/apply flows.
+- No migration safety boundary changed: `migrate --apply` still requires a proven
+  OpenFeature client binding and continues to skip dynamic keys, detail
+  evaluations, bulk calls, unknown fallbacks, and ambiguous cases.
+
+## [0.5.1] - 2026-05-27
+
+### Fixed
+
+- Corrected `migrate --dry-run` messaging when all previewed diffs use proven
+  OpenFeature client bindings. Dry-run output no longer claims placeholder
+  provider/client setup is required when configured imported bindings, aliases,
+  or local `OpenFeature.getClient()` bindings are already present.
+- Clarified README and docs scope wording for both supported LaunchDarkly Node.js
+  server SDK package names: current `@launchdarkly/node-server-sdk` and legacy
+  `launchdarkly-node-server-sdk`.
+- Corrected OpenTelemetry feature-flag semantic-convention guidance to use the
+  current `feature_flag.evaluation` event model and current attribute names.
+- Corrected homepage release-state and lower CTA messaging now that `flaglint@0.5.0`
+  is published.
+- Narrowed broad flag-debt wording where it could imply comprehensive unused-flag
+  lifecycle analysis rather than direct SDK coupling and migration review work.
+
 ## [0.5.0] - 2026-05-26
 
 ### Added

package/README.md

@@ -41,7 +41,7 @@ Docs: [Getting Started](https://flaglint.dev/docs/getting-started) · [Commands]
 | Step | Command | Purpose |
 |------|---------|---------|
 | 1 | `flaglint scan` | AST inventory of every direct LD Node server SDK call |
-| 2 | `flaglint migrate --dry-run` | Reviewable before/after diffs with provider setup guidance |
+| 2 | `flaglint migrate --dry-run` | Reviewable before/after diffs; provider setup guidance appears when needed |
 | 3 | `flaglint migrate --apply` | Apply only guarded, provably automatable transformations |
 | 4 | `flaglint validate --no-direct-launchdarkly` | CI gate: exit 1 if direct LD calls remain |
 
@@ -141,7 +141,7 @@ flaglint migrate --exclude-tests           # skip test and spec files
 | Option | Default | Description |
 |--------|---------|-------------|
 | `--output` | `MIGRATION.md` | Write migration plan to file |
-| `--dry-run` | — | Print reviewable diffs to stdout; includes provider setup guidance |
+| `--dry-run` | — | Print reviewable diffs to stdout; includes provider setup guidance when a diff needs it |
 | `--apply` | — | Apply automatable transformations in-place (requires clean git tree) |
 | `--allow-dirty` | — | Override dirty-tree guard for `--apply` |
 | `--config` | auto-detect | Path to a config file |
@@ -216,7 +216,8 @@ but they are not automatically transformed.
 
 ## Supported API matrix
 
-**Scope: LaunchDarkly Node.js server-side SDK** (`launchdarkly-node-server-sdk`).
+**Scope: LaunchDarkly Node.js server-side SDK evaluation calls from
+`@launchdarkly/node-server-sdk` and legacy `launchdarkly-node-server-sdk` imports.**
 
 | LaunchDarkly call | Automatable | OpenFeature equivalent |
 |---|---|---|
@@ -439,8 +440,8 @@ reviewers see them in the PR without running anything locally.
 
 Validated against 120 deterministic benchmark cases within the supported LaunchDarkly Node.js server-side SDK scope. 100% precision and recall are limited to those 120 tested cases and to the Node.js server-side SDK call patterns explicitly listed in the Supported API matrix above.
 
-Detection is AST-based, not regex: client binding patterns, import aliases, and CJS require
-forms are resolved before matching.
+Detection is AST-based, not regex: client binding patterns, named `init` import aliases,
+OpenFeature import aliases, and CJS require forms are resolved before matching.
 
 ---
 

package/dist/bin/flaglint.js

@@ -178,6 +178,7 @@ function walk(root, visit) {
 }
 function collectLDClients(ast) {
   const ldNamespaces = /* @__PURE__ */ new Set();
+  const ldInitFunctions = /* @__PURE__ */ new Set();
   for (const stmt of ast.body) {
     if (stmt.type === "ImportDeclaration") {
       const importDecl = stmt;
@@ -186,6 +187,12 @@ function collectLDClients(ast) {
           if (spec.type === "ImportNamespaceSpecifier" || spec.type === "ImportDefaultSpecifier") {
             ldNamespaces.add(spec.local.name);
           }
+          if (spec.type === "ImportSpecifier") {
+            const importedName = spec.imported.type === "Identifier" ? spec.imported.name : spec.imported.value;
+            if (importedName === "init") {
+              ldInitFunctions.add(spec.local.name);
+            }
+          }
         }
       }
       continue;
@@ -203,7 +210,7 @@ function collectLDClients(ast) {
       }
     }
   }
-  if (ldNamespaces.size === 0) return /* @__PURE__ */ new Set();
+  if (ldNamespaces.size === 0 && ldInitFunctions.size === 0) return /* @__PURE__ */ new Set();
   const ldClients = /* @__PURE__ */ new Set();
   walk(ast, (node) => {
     if (node.type !== "VariableDeclaration") return;
@@ -211,6 +218,10 @@ function collectLDClients(ast) {
     for (const decl of varDecl.declarations) {
       if (decl.id.type !== "Identifier" || !decl.init || decl.init.type !== "CallExpression") continue;
       const initCall = decl.init;
+      if (initCall.callee.type === "Identifier" && ldInitFunctions.has(initCall.callee.name)) {
+        ldClients.add(decl.id.name);
+        continue;
+      }
       if (initCall.callee.type !== "MemberExpression" || initCall.callee.computed) continue;
       const initCallee = initCall.callee;
       if (initCallee.object.type === "Identifier" && initCallee.property.type === "Identifier" && ldNamespaces.has(initCallee.object.name) && initCallee.property.name === "init") {
@@ -740,7 +751,7 @@ function formatHTML(result, options) {
     <div class="card"><div class="card-num orange">${manualCount}</div><div class="card-label">Manual Review (${manualPct}%)</div></div>
     <div class="card"><div class="card-num blue">${detailBulkCount}</div><div class="card-label">Detail/Bulk Calls</div></div>` : "";
   const title = options.title ? esc(options.title) : "FlagLint Scan Report";
-  const version = true ? "0.5.0" : "0.1.0";
+  const version = true ? "0.5.2" : "0.1.0";
   return `<!DOCTYPE html>
 <html lang="en">
 <head>
@@ -1193,7 +1204,7 @@ function formatMigrationReport(analysis) {
     unsupportedUnknownCount
   } = analysis;
   const date = (/* @__PURE__ */ new Date()).toLocaleDateString();
-  const version = true ? "0.5.0" : "0.1.0";
+  const version = true ? "0.5.2" : "0.1.0";
   const lines = [];
   lines.push("# OpenFeature Migration Inventory");
   lines.push(`Generated by FlagLint v${version} on ${date}`);
@@ -1349,7 +1360,7 @@ function itemLabel(item) {
 }
 function formatProviderSetupSection() {
   const lines = [];
-  lines.push("## Provider Setup (Required Before Applying Diffs)");
+  lines.push("## Provider Setup Guidance (For Diffs Requiring Setup)");
   lines.push("");
   lines.push("LaunchDarkly remains your feature flag provider.");
   lines.push("OpenFeature becomes the evaluation API your application code calls.");
@@ -1376,7 +1387,7 @@ function formatProviderSetupSection() {
   lines.push("await OpenFeature.setProviderAndWait(ldProvider);");
   lines.push("");
   lines.push("// Share this client across your application.");
-  lines.push("// Replace the `openFeatureClient` placeholder in the diffs below.");
+  lines.push("// Replace the `openFeatureClient` placeholder in affected diffs.");
   lines.push("const openFeatureClient = OpenFeature.getClient();");
   lines.push("```");
   lines.push("");
@@ -1417,20 +1428,35 @@ async function formatDryRunDiff(analysis, source, allowedBindings = []) {
     }
   }
   const lines = [];
+  const reviewableDiffCount = [...replacementsByFile.values()].reduce((sum, items) => sum + items.length, 0);
+  const setupRequiredCount = [...replacementsByFile.values()].reduce(
+    (sum, items) => sum + items.filter((item) => item.requiresProviderSetup).length,
+    0
+  );
   lines.push("# FlagLint migrate --dry-run");
   lines.push("");
-  lines.push(
-    "These diffs use the placeholder `openFeatureClient` and require OpenFeature provider/client setup before they can be applied."
-  );
+  if (reviewableDiffCount > 0 && setupRequiredCount === 0) {
+    lines.push(
+      "The transformations below use proven OpenFeature client bindings already present in the affected files."
+    );
+  } else if (setupRequiredCount > 0 && setupRequiredCount === reviewableDiffCount) {
+    lines.push(
+      "These diffs use the placeholder `openFeatureClient` and require OpenFeature provider/client setup before they can be applied."
+    );
+  } else if (setupRequiredCount > 0) {
+    lines.push(
+      "Some diffs use proven OpenFeature client bindings; diffs using the `openFeatureClient` placeholder require provider/client setup before they can be applied."
+    );
+  }
   lines.push("No files are modified by dry-run output.");
   lines.push("");
-  lines.push(`Reviewable diffs: ${[...replacementsByFile.values()].reduce((sum, items) => sum + items.length, 0)}`);
-  lines.push(
-    `Diffs requiring provider setup: ${[...replacementsByFile.values()].reduce((sum, items) => sum + items.filter((item) => item.requiresProviderSetup).length, 0)}`
-  );
+  lines.push(`Reviewable diffs: ${reviewableDiffCount}`);
+  lines.push(`Diffs requiring provider setup: ${setupRequiredCount}`);
   lines.push(`Skipped usages: ${skipped.length}`);
   lines.push("");
-  lines.push(...formatProviderSetupSection());
+  if (setupRequiredCount > 0) {
+    lines.push(...formatProviderSetupSection());
+  }
   if (replacementsByFile.size > 0) {
     lines.push("## Diffs");
     lines.push("```diff");
@@ -1942,7 +1968,7 @@ Examples:
 // src/cli.ts
 function createCLI() {
   const program2 = new Command();
-  program2.name("flaglint").description("LaunchDarkly Node.js server SDK -> OpenFeature migration.").version("0.5.0", "-v, --version", "output the current version").addHelpText(
+  program2.name("flaglint").description("LaunchDarkly Node.js server SDK -> OpenFeature migration.").version("0.5.2", "-v, --version", "output the current version").addHelpText(
     "after",
     `
 Examples:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "flaglint",
-  "version": "0.5.0",
+  "version": "0.5.2",
   "description": "LaunchDarkly Node.js server SDK -> OpenFeature migration.",
   "type": "module",
   "bin": {