lurqrun 0.0.2 → 0.0.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.d.ts CHANGED
@@ -33,6 +33,48 @@ declare function isFrontendCategory(category: Category | null | undefined): bool
33
33
  */
34
34
  type Confidence = 'proven' | 'emerging' | 'promising' | 'unproven';
35
35
  type Runtime = 'browser' | 'node' | 'both';
36
+ /** Result of co-installing two package versions in the sandbox (compat matrix). */
37
+ type CompatStatus = 'compatible' | 'conflict';
38
+ /** Sandbox verdict surfaced to agents: did this version actually install + load? */
39
+ interface BuildVerified {
40
+ version: string;
41
+ installed: boolean;
42
+ loaded: boolean | null;
43
+ driver: string;
44
+ ranAt: string;
45
+ }
46
+ /** A map of dependency/peer/engine name → semver range (from a manifest). */
47
+ type DependencyRanges = Record<string, string>;
48
+ /** `peerDependenciesMeta`: per-peer flags, notably `{ optional: true }`. */
49
+ type PeerMeta = Record<string, {
50
+ optional?: boolean;
51
+ }>;
52
+ /** One incompatibility found across a set of packages. */
53
+ interface CompatConflict {
54
+ /** Where the conflict came from. `peer-deps`/`engines` are Tier-1 (metadata,
55
+ * instant, deterministic); `sandbox` is Tier-2 (empirical co-install). */
56
+ source: 'peer-deps' | 'engines' | 'sandbox';
57
+ /** The packages involved in the conflict. */
58
+ packages: string[];
59
+ detail: string;
60
+ }
61
+ /**
62
+ * `compat` output: whole-architecture compatibility for a set of packages.
63
+ * Tier-1 peer-dependency/engine analysis + any Tier-2 sandbox conflicts.
64
+ */
65
+ interface CompatOutput {
66
+ packages: string[];
67
+ overall: 'compatible' | 'conflict' | 'unknown';
68
+ conflicts: CompatConflict[];
69
+ /** Packages lurq has no compatibility metadata for (counted toward `unknown`). */
70
+ unverified: string[];
71
+ /** The exact members the check ran over, name + resolved version. Versions are
72
+ * always surfaced here, and the structure is stable for later scraping. */
73
+ checked: {
74
+ name: string;
75
+ version: string | null;
76
+ }[];
77
+ }
36
78
  type AdvisorySeverity = 'critical' | 'high' | 'moderate' | 'low' | 'info';
37
79
  interface Advisory {
38
80
  id: string;
@@ -91,7 +133,6 @@ interface EvaluateOutput {
91
133
  lastReleaseAt: string | null;
92
134
  weeklyDownloads: number | null;
93
135
  downloadGrowth90d: number | null;
94
- dependentsCount: number | null;
95
136
  scorecard: number | null;
96
137
  bundleMinGzipKb: number | null;
97
138
  deprecated: boolean;
@@ -100,8 +141,12 @@ interface EvaluateOutput {
100
141
  summary: string | null;
101
142
  usageGuide: UsageGuide | null;
102
143
  repoUrl: string | null;
144
+ /** Latest sandbox verdict for this package, if one has been run. */
145
+ buildVerified?: BuildVerified | null;
103
146
  }
104
147
  /** `verify` output (§12.3.4). */
148
+ /** Supply-chain risk gate: high = review before installing (see security/risk). */
149
+ type RiskLevel = 'low' | 'medium' | 'high';
105
150
  interface VerifyOutput {
106
151
  exists: boolean;
107
152
  tracked: boolean;
@@ -110,6 +155,10 @@ interface VerifyOutput {
110
155
  latestVersion: string | null;
111
156
  weeklyDownloads: number | null;
112
157
  riskFlags: string[];
158
+ /** Overall supply-chain risk, rolled up from riskFlags. */
159
+ risk: RiskLevel;
160
+ /** Suspected typosquat target — a popular package this name closely mimics. */
161
+ typosquatOf: string | null;
113
162
  confidence: Confidence | null;
114
163
  advisoryCount: number;
115
164
  }
@@ -229,4 +278,4 @@ declare const logger: {
229
278
 
230
279
  declare function buildProgram(): Command;
231
280
 
232
- export { API_KEY_PREFIX, type Advisory, type AdvisorySeverity, CACHE_TTL, CATEGORIES, type Candidate, type Category, type CategorySource, type Confidence, type Config, ConfigError, DEFAULT_ENDPOINT, type DiscoverySource, type DiscoveryStatus, EMBEDDING_DIM, type EvaluateOutput, FRONTEND_CATEGORIES, PACKAGE_NAME, type Runtime, SERVER_NAME, STALENESS_DAYS, type ScoreBreakdown, type UsageGuide, VERSION, type VerifyOutput, buildProgram, getConfig, isCategory, isFrontendCategory, loadEnv, logger, requireConfig };
281
+ export { API_KEY_PREFIX, type Advisory, type AdvisorySeverity, type BuildVerified, CACHE_TTL, CATEGORIES, type Candidate, type Category, type CategorySource, type CompatConflict, type CompatOutput, type CompatStatus, type Confidence, type Config, ConfigError, DEFAULT_ENDPOINT, type DependencyRanges, type DiscoverySource, type DiscoveryStatus, EMBEDDING_DIM, type EvaluateOutput, FRONTEND_CATEGORIES, PACKAGE_NAME, type PeerMeta, type RiskLevel, type Runtime, SERVER_NAME, STALENESS_DAYS, type ScoreBreakdown, type UsageGuide, VERSION, type VerifyOutput, buildProgram, getConfig, isCategory, isFrontendCategory, loadEnv, logger, requireConfig };