nativekeel 0.1.6 → 0.1.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nativekeel",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "description": "Health check for React Native apps: version support, New Architecture blockers, unmaintained native modules and leaked secrets.",
   "type": "module",
   "bin": {

package/src/analyze.js

@@ -15,6 +15,7 @@ import {
   RECENT_RELEASE_DAYS,
   STALE_RELEASE_DAYS,
   PLAY_TARGET_SDK,
+  RENAMED,
   REPLACEMENTS,
   SUPPORTED_EXPO_MAJORS,
   SUPPORTED_RN_MINORS,
@@ -263,7 +264,7 @@ export async function analyze(project, { get, now = new Date(), offline: forcedO
     }
     // Only code that has to follow React Native or the OS goes stale; a finished JS utility does not.
     const stale = !dep.unmaintained && !revived && age !== null && age > STALE_RELEASE_DAYS && (native || !!release.rnLink);
-    const alternatives = dir && dir.alternatives && dir.alternatives.length ? dir.alternatives : REPLACEMENTS[name] || [];
+    const alternatives = RENAMED[name] ? [RENAMED[name]] : dir && dir.alternatives && dir.alternatives.length ? dir.alternatives : REPLACEMENTS[name] || [];
     if (noNewArch || dep.unmaintained || stale) {
       const problems = [
         noNewArch && 'no New Architecture support',
@@ -279,7 +280,7 @@ export async function analyze(project, { get, now = new Date(), offline: forcedO
         area: 'dependency',
         title: `${name}: ${problems.join(', ')}`,
         detail: `${why}${alternatives.length ? ` Alternatives: ${alternatives.join(', ')}.` : ''}`,
-        fix: { kind: 'replace-dep', name, native, noNewArch, unmaintained: dep.unmaintained || stale, alternatives },
+        fix: { kind: 'replace-dep', name, native, noNewArch, unmaintained: dep.unmaintained || stale, alternatives, renamedTo: RENAMED[name] || null },
       });
     } else if (revived) {
       add({

package/src/plan.js

@@ -314,6 +314,9 @@ export function buildPlan(result) {
       why: 'These packages decide how far you can upgrade. Swap them while the app still runs on its current version, so every problem has one cause.',
       steps: replace.map((d) => {
         const reason = [d.noNewArch && 'no New Architecture support', d.unmaintained && 'unmaintained'].filter(Boolean).join(', ');
+        if (d.renamedTo) {
+          return `\`${d.name}\` moved to \`${d.renamedTo}\` (same API). \`${pm.remove} ${d.name} && ${pm.add} ${d.renamedTo}\`, then update the imports.`;
+        }
         if (interopPatched.has(d.name) && !d.unmaintained) {
           return `\`${d.name}\` (${reason}, native). The New Architecture step below patches it so it loads; move to a release with a TurboModule spec once one exists.`;
         }
@@ -397,20 +400,33 @@ export function buildPlan(result) {
     let from = rn.from;
     const tracked = result.deps.filter((d) => COMPAT[d.name]);
     const lastRange = {};
-    const steps = upgradeHops(rn.from, rn.to).map((to) => {
+    const lastMajor = {};
+    const hopList = upgradeHops(rn.from, rn.to);
+    // When the New Architecture switch happens on the way, library versions up to that stop
+    // must still run on the legacy architecture (Reanimated 4, for one, does not).
+    const switchAt = deferredArch
+      ? hopList.findIndex((h) => Number(h.split('.')[1]) >= 76 && Number(h.split('.')[1]) < NEW_ARCH_ONLY_MINOR)
+      : -1;
+    const majorOf = (v) => Number(String(v).split('.')[0]);
+    const steps = hopList.map((to, i) => {
       const minor = Number(to.split('.')[1]);
+      const archOn = switchAt < 0 || i > switchAt;
       const bumps = tracked
         .map((d) => {
-          const best = bestRange(d.name, minor, true);
-          // Prefer staying on the installed major when it still supports this hop.
-          const major = d.version ? Number(d.version.split('.')[0]) : null;
-          const same = major !== null && best && Number(best.from.split('.')[0]) !== major ? bestRange(d.name, minor, true, { major }) : null;
+          const best = bestRange(d.name, minor, archOn);
+          // Stay on the major of the previous step (or the installed one) while it still works.
+          const major = lastMajor[d.name] ?? (d.version ? majorOf(d.version) : null);
+          const same = major !== null && best && majorOf(best.from) !== major ? bestRange(d.name, minor, archOn, { major }) : null;
           return { name: d.name, best, same };
         })
         .filter((b) => b.best && (b.same || b.best).range !== lastRange[b.name])
         .map((b) => {
-          lastRange[b.name] = (b.same || b.best).range;
-          return b.same ? `\`${b.name}\` ${b.same.range} (or ${b.best.range}, a major migration)` : `\`${b.name}\` ${b.best.range}`;
+          const chosen = b.same || b.best;
+          const forcedMajor = !b.same && lastMajor[b.name] !== undefined && majorOf(chosen.from) !== lastMajor[b.name];
+          lastRange[b.name] = chosen.range;
+          lastMajor[b.name] = majorOf(chosen.from);
+          if (b.same) return `\`${b.name}\` ${b.same.range} (or ${b.best.range}, a major migration)`;
+          return `\`${b.name}\` ${b.best.range}${forcedMajor ? ' (a major migration: read its migration guide first)' : ''}`;
         });
       const step = `${from} → ${to}: apply the diff from ${UPGRADE_HELPER_URL(from, to)}${bumps.length ? `, move ${bumps.join(' and ')}` : ''}, reinstall pods, build both platforms, commit.`;
       from = to;

package/src/report-html.js

@@ -15,11 +15,19 @@ export function htmlReport(result, { brand = null, plan = null } = {}) {
   const defaultOn = !!result.project.reactNative && Number(result.project.reactNative.split('.')[1]) >= 76;
   const arch = (v) => (v === true ? 'on' : v === false ? 'off' : defaultOn ? 'on (default)' : 'off (default)');
 
+  // Outdated packages are many and alike: one collapsible table instead of a card each.
+  const isBump = (f) => f.id.startsWith('dep-major:');
   const rows = SEVERITIES.flatMap((sev) =>
     result.findings
-      .filter((f) => f.severity === sev)
+      .filter((f) => f.severity === sev && !isBump(f))
       .map((f) => `<li class="f ${sev}"><span class="tag">${sevLabel[sev]}</span><div><strong>${rich(f.title)}</strong><p>${rich(f.detail)}</p></div></li>`),
   ).join('\n');
+  const bumps = result.findings.filter(isBump);
+  const bumpTable = bumps.length
+    ? `<details class="bumps"><summary>${bumps.length} package${bumps.length === 1 ? ' is' : 's are'} a major version behind <span class="muted">(low)</span></summary><table><thead><tr><th>Package</th><th>Installed</th><th>Latest</th><th></th></tr></thead><tbody>${bumps
+        .map((f) => `<tr><td>${esc(f.fix.name)}</td><td>${esc(f.fix.from || '')}</td><td>${esc(f.fix.to || '')}</td><td class="muted">${f.fix.native ? 'native' : ''}</td></tr>`)
+        .join('')}</tbody></table></details>`
+    : '';
 
   const planHtml = plan
     ? `<section><h2>Upgrade plan <small>scope: ${esc(plan.complexity.size)}</small></h2>${plan.phases
@@ -50,6 +58,7 @@ h1{font-size:26px;margin:0 0 4px}h2{font-size:19px;margin:32px 0 12px}h2 small{f
 .stat.critical b{color:var(--critical)}.stat.high b{color:var(--high)}
 .facts{background:var(--card);border:1px solid var(--line);border-radius:10px;padding:12px 16px;margin-top:12px;display:flex;flex-wrap:wrap;gap:6px 24px;font-size:14px}
 ul.list{list-style:none;padding:0;margin:0;display:grid;gap:8px}
+details.bumps{margin-top:8px;background:var(--card);border:1px solid var(--line);border-left:4px solid var(--low);border-radius:8px;padding:10px 14px}details.bumps summary{cursor:pointer;font-weight:600}details.bumps table{width:100%;border-collapse:collapse;margin-top:10px;font-size:14px}details.bumps th,details.bumps td{text-align:left;padding:4px 8px;border-top:1px solid var(--line)}.muted{color:var(--muted);font-weight:400}
 .f{display:flex;gap:12px;background:var(--card);border:1px solid var(--line);border-left:4px solid var(--low);border-radius:8px;padding:10px 14px}
 .f p{margin:2px 0 0;color:var(--muted);font-size:14px}.f strong{overflow-wrap:anywhere}
 .tag{flex:none;font-size:12px;font-weight:600;text-transform:uppercase;letter-spacing:.03em;min-width:64px;padding-top:2px}
@@ -80,7 +89,7 @@ ${p.android && p.android.targetSdk ? `<span>targetSdk <b>${p.android.targetSdk}<
 <span>${result.deps.length} dependencies (${result.deps.filter((d) => d.native).length} native)</span>
 </div>
 <h2>Findings</h2>
-${result.findings.length ? `<ul class="list">${rows}</ul>` : '<p>No issues found.</p>'}
+${result.findings.length ? `${rows ? `<ul class="list">${rows}</ul>` : ''}${bumpTable}` : '<p>No issues found.</p>'}
 ${planHtml}
 <footer>${footer}</footer>
 </main></body></html>

package/src/report-sarif.js

@@ -49,7 +49,7 @@ export function sarifReport(result, { version = '0.0.0' } = {}) {
             ruleId: f.id.split(':')[0],
             level: LEVEL[f.severity],
             message: { text: `${f.title}. ${f.detail}` },
-            locations: [{ physicalLocation: { artifactLocation: { uri: loc.uri }, region: { startLine: loc.line } } }],
+            locations: [{ physicalLocation: { artifactLocation: { uri: toUri(loc.uri) }, region: { startLine: loc.line } } }],
             // Stable across runs so code scanning tracks one alert per finding.
             partialFingerprints: { nativekeelId: f.id },
             properties: { severity: f.severity, area: f.area },
@@ -59,3 +59,8 @@ export function sarifReport(result, { version = '0.0.0' } = {}) {
     ],
   };
 }
+
+// SARIF artifact locations are URIs: encode each path segment (spaces, #, %), keep the slashes.
+function toUri(file) {
+  return file.split(/[\\/]/).map(encodeURIComponent).join('/');
+}

package/src/rules.js

@@ -70,6 +70,21 @@ export const REPLACEMENTS = {
   'react-native-print': ['expo-print'],
   'react-native-i18n': ['react-native-localize', 'expo-localization'],
   'expo-av': ['expo-audio', 'expo-video'],
+  'react-native-snap-carousel': ['react-native-reanimated-carousel'],
+  'react-native-iphone-x-helper': ['react-native-safe-area-context'],
+  'react-native-slider': ['@react-native-community/slider'],
+  'react-native-datepicker': ['@react-native-community/datetimepicker'],
+};
+
+// Packages that moved to a new name with the same API: swap the package, update the imports.
+export const RENAMED = {
+  '@react-native-community/async-storage': '@react-native-async-storage/async-storage',
+  '@react-native-community/cameraroll': '@react-native-camera-roll/camera-roll',
+  '@react-native-community/masked-view': '@react-native-masked-view/masked-view',
+  '@react-native-community/viewpager': 'react-native-pager-view',
+  '@react-native-community/picker': '@react-native-picker/picker',
+  '@react-native-community/clipboard': '@react-native-clipboard/clipboard',
+  'react-native-netinfo': '@react-native-community/netinfo',
 };
 
 export const UPGRADE_HELPER_URL = (from, to) =>