opensecurity 0.1.0

package/dist/telemetry.js

@@ -0,0 +1,72 @@
+import { loadGlobalConfig, saveGlobalConfig } from "./config.js";
+const DEFAULT_ENDPOINT = "https://telemetry.opensecurity.dev/v1/events";
+/**
+ * Check if telemetry is enabled.
+ * Respects:
+ *   1. OPENSECURITY_TELEMETRY env var (0/false to disable, 1/true to enable)
+ *   2. Global config `telemetry.enabled` field
+ *   3. Defaults to false (opt-in)
+ */
+export function isTelemetryEnabled(config, env = process.env) {
+    const envVal = env.OPENSECURITY_TELEMETRY?.trim().toLowerCase();
+    if (envVal === "0" || envVal === "false")
+        return false;
+    if (envVal === "1" || envVal === "true")
+        return true;
+    return config.telemetry?.enabled === true;
+}
+/**
+ * Enable or disable telemetry in the global config.
+ */
+export async function setTelemetryEnabled(enabled, env = process.env) {
+    const config = await loadGlobalConfig(env);
+    const updated = {
+        ...config,
+        telemetry: { ...(config.telemetry ?? {}), enabled }
+    };
+    await saveGlobalConfig(updated, env);
+}
+/**
+ * Build a telemetry event with system-level (non-identifying) metadata.
+ */
+export function createEvent(event, properties = {}) {
+    return {
+        event,
+        properties: {
+            ...properties,
+            os: process.platform,
+            arch: process.arch,
+            nodeVersion: process.version,
+            cliVersion: "0.1.0"
+        },
+        timestamp: new Date().toISOString()
+    };
+}
+/**
+ * Send a telemetry event. No-ops if telemetry is disabled.
+ * Never throws — all errors are silently swallowed to avoid
+ * impacting the user experience.
+ */
+export async function sendEvent(event, config, env = process.env) {
+    if (!isTelemetryEnabled(config, env))
+        return;
+    const endpoint = config.telemetry?.endpoint ?? DEFAULT_ENDPOINT;
+    try {
+        await fetch(endpoint, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify(event),
+            signal: AbortSignal.timeout(3000)
+        });
+    }
+    catch {
+        // Silently ignore — telemetry must never interrupt the user
+    }
+}
+/**
+ * Convenience: create + send in one call.
+ */
+export async function trackEvent(eventName, properties = {}, config, env = process.env) {
+    const event = createEvent(eventName, properties);
+    await sendEvent(event, config, env);
+}

package/package.json

@@ -0,0 +1,44 @@
+{
+  "name": "opensecurity",
+  "version": "0.1.0",
+  "private": false,
+  "type": "module",
+  "bin": {
+    "opensecurity": "dist/cli.js",
+    "openSecurity": "dist/cli.js"
+  },
+  "scripts": {
+    "dev": "tsx src/cli.ts",
+    "proxy": "tsx src/proxy.ts",
+    "build": "tsc",
+    "prepack": "npm run build",
+    "package": "npm run build && npm pack",
+    "test": "vitest run",
+    "lint": "eslint ."
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "dependencies": {
+    "@babel/parser": "^7.26.9",
+    "@babel/traverse": "^7.26.9",
+    "@babel/types": "^7.26.9",
+    "commander": "^12.0.0",
+    "picomatch": "^4.0.2",
+    "semver": "^7.6.3"
+  },
+  "devDependencies": {
+    "@types/babel__traverse": "^7.20.7",
+    "@types/node": "^22.10.0",
+    "@types/picomatch": "^3.0.2",
+    "@types/semver": "^7.5.8",
+    "@typescript-eslint/eslint-plugin": "^8.57.0",
+    "@typescript-eslint/parser": "^8.57.0",
+    "eslint": "^9.39.4",
+    "tsx": "^4.19.0",
+    "typescript": "^5.7.3",
+    "vitest": "^2.1.8"
+  }
+}